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WB «w» < J p > < 12 > & 18 *t# §^ 4k ^ (A) (n)»»tm^W»^ 

#gg*Rl -234262 



(43)^(80 ^11^(1999)8^270 



(50 Int.CL' 
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H0 4L 9/00 
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G 0 6 F 9/06 
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G 0 6 F 9/06 
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G 0 9 C 1/00 


640E 
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64 0 
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C^32H) fc*KKR< 
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C71)UB|A 000005496 














^1*10^0998)2^9 0 












































(54) HmoeftJ 











(57) 

rasa] CPU/X7- • y*'jo5>&v»iKiiaTi«aic 

M?»*RJ fltffig 2 0 a>aK&tftBSt£9 2 0 2 tt. 

1S£LTHIJ1S3 O'v.fcii-ra, aW!B3 0OSB3©- 
A'j6j1tBBStffh3SSK 3 0 4tt. fe®ii5?Bey*8|J3 0 l tfffi 

#AttHft«WHTa. tt*tt(ISttM*3 0 3tt. 

1S&#tf>$. $5.^3«-*IfiIt*B8SCl+S£fiB3 0 4 

wttBsi&^jsffl u l. «as2 o ca-r. 

®tm 2 0 W5B 2 (D-^|iJtiB8S^K£ffl 2 0 311 HEW 
*. «5^fi5ffi«aES2 0 4«, -^(filftBgSKOTMffl^* 
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ffig 05-1 1 -1 4 ; 1 1 : 26AM; 
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10465802491 # 23/ 53 

tera* 1 1-234262 



^ a ww* ar * «*es^a t , 
ft*»w*sfiFar*fts««ea!**i:, 

0-;»flJttHItiftB*a0»»tS** * t kz&EHffittW 
ffiffittaffitt. 

mSK«imfiW^Sl^{ti*-j-dKn««l2:. &t»W$B 
©-St L < t» t fcfc &*i*ttfc» I, tOE» 2 

a-f«aw«j»w«sfe^ir»6n-5«iK:, 'M&Ksa 
msanEWMffliw**^*!, 

'>&< tfeWSBS*W*ffJ!B¥ft)5«ffaTS»fiW«ilc 



ftt* 

i»fi!afflw«ffa*»**ffa-r«fttt«f«i. ihigsi 

10 ^4Att««E««a^Sl(7>iliEMMffii1l!Ftt9a¥a 

20 &£**ru 

8*<& W« 5 IB 2 *a t , 

*»w*©»»fcffl^^aiB«tti3«ftflrar**2c!> 

l ffi&»2«>ftewAft 
»3M^«*K-*#*iH«£ fc men 2 ®aE9!ttu«fR 

«a^a^ffa^*3iEfW*Bft«*^ s feifci»6n^« 

Wtt^afessrs* 3 coise^at ^ t 
£+*Wffi»«ttaKn. 

35 ttS#«3) »*WlftiiL»*a2«>i|:iIffljS«MftH 

40 **£**T«au 

hmwhi 3»*ai&^u»*3i3©wffla»«a 
45 aatfi^T, a^*at«jL.-«rfflia»3&tA^t«* 

«*wsitt^*a(?)!tt^fttLxffl^ 

5 1 3??*^ 1 knLsa*H4 afqjflSEffiffia 

50 flSHTftoT. ?'Jffl5I^SEB*0®SS:^ara®iP« 
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; 046580249 1 # 24/ 53 

4*S8¥ 1 1 -234262 



* i auiNMR«ai-ffr«fti i ©as&tt&sm^Ki. 

a<§ 2 ©3S»fi?$8i: H£tt2 ©-r&riJftl8KstS3 
^js^fpffls-fr. m 1 OlSStS«S:StSE-r«if5 1 «>(BS 

SMff$B©-«E fc L < fi^SS & b 1 1« <& ft-S tflfc** L M 
52m 2 «-*HHt»ff ^KfcfEffl & t« 2 ©JS 

«ffi©ii??B*«*?-f 5 KaifflMUt t . 

tt«HRwwa&, 

^*HSlM"*fMMS«£. 0rsS!llltfllM&ilGrfll?& 

3 rfiittra&si-K* Kfcfpffl stress 2 ©KSfsa 
ffi2atti^«&s?s82araffifc;ff-83;a&. 



SBl©JS£lff«. 43£tf82©aSrtS8M)-«fcL.<ri 

tssiesa^-rajis 3 o>iiie¥R&««rr9 ;t£M 

ttSSMttttttRBfrSM:. 

fc. 

JtU i£BB8&#»$::i#^fc<ifca-SLSe9K;H» 
20 t> 

ill §&&8EgRl3;. 

#5$©i5«£«#-r3S5 1 ©*&2&«$BKtt^J&,»:, 

a<3 L. fc35 2 ©5S»fBffi(CHi'l5Sffi 2 ©-^rttlSSCsW 

35 tWHHWRi, 

■MWI«>-»"bb<H:*«*^tK#6n««[li«Lm 
2 O-A' Attttff¥B«f|!n fe* 2 CO* 

45 ITC'WIlSffijWffiSS^Ki:. - - - 

50 filtt«ft«a*f*ffi3©-3!nWt«|feSt»*ftt. 
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*tPB¥ t 1 -2 3 4 2 6 2 



3 0-*l*HtB»8Hl*S&#«SltT82 stiffs 
*2 oaWMBSSfff-f 2 aa*ti!«|t»g?R£. 

SflHRttS£R£* 

[K*^ 9 ] &*ig 6 an USJf*^ 8 CO? iJfflSMfrRaE 
*l»1S*K?a*Rtt, {&im€KWHK&&»tta£H 

tttt-r * 1 1 1 »« t r 5 «« ft&&&£Eo 

[0 0 0 1] 
[0 0 0 2] 

to 0 0 3] W«^«fiJ*ST*<OiUrH»«(Cffln 
[0 0 0 4] V7 Kf>x70!)¥Uffla*ft«3£Taa*«> 



ttffifcLT. *W4MT5, 5 8 6. 1 8 6^n97DB 

[0 0 0 51 (S*tt«Ttt. V7^3i7W^tlfc 

V7h^o:7^>y*S*ATr**ttfea^TnJ5 # 
WfcttRSA (Rives t— Shami r —A d 1 
eman) 4iBBft«W*fflnTdS0* Wffl^fSltUTR 

[0 0 0 6] 

X&VftZfcib, jaJSfi*t£*\, BruceSchne 
i e r . Applied Cryptography 

20 (Second Edition), Wi ley, 19 
9 6fci:*l«. 9-^^f-y3 > (SPARC 2) 
^ &R1 0 2 4tTy N •^HSSK'y hG>RSA«F^ 
&£ft-sT 1 0 2 4 tTy h**)^— #GiEM't&mm\*> 
S*#0. 9 78\ #tfiE#0. 0 8#^T^^ B C 

25 <Z>t«>* I CA-Ktf>ct5)Ct. 7-jr^7--xa>tJt 
t*LTtt«5*>i;:CPU/l7- ■ /tU^Mi^|2f 

[0 0 0 7] 

30 a*T&Sntt>©T. I C*-Hc0<k5 (CCPUA7 
[0 0 0 8] 

*seww«mf8*r£". ft«(ott«£«aT*s*«« 
40 tt«»«-»*Rt, an«ttifmi«#ffr<&SEn«tt«r 

*»W*Rt, «l©»fi*Rfc£**a. Sfc, ttgB 

•flMEft^R-rcitRljfaShS^Ri:, &2<7>-#fl£ 
HRSH**ft£, JS«ffi««ttSr«««1iraMK¥R 

so [0009] ^ sir#a2oHMji*tta«SBB. s 
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fta*F 1 1 -2 34 2 6 2 



SE*tt«fcflM*T«BU S««HflnKea9Rtt, ffi 

[0 0 123 S}«9(5a>nffift«ttsaB»3. B*«l 

&^LS^4CO*iJJHft<&«aSB'7?»^T. PlfflSffi 

to o 1 3i »Aa[6«)nffln«ifta«Bti. a£9i«iBb 

*»l©-;WlttWRShl?*lS:<!:, WEI&toffiHBtta* 

ttKflni«iH-Rr«lll(!)KlfeW««'^ift&. JfiKSS 
35 2 OStlMMllznBB 2 4>-*|ftlttM fttf 



nraEatiBBft4NW£ttrsaattB&. 

B 1 attfttffto-B 4) L < «±S$£ t ft & na c 

sswa^st. ttft«rBett&*am2raittM!Bstg 

is «fttt?ft*<£fs-r«ttBtfH&. fns&iMiaitiNRff 

HSfMBt^wa-rs S934A«!)iAfB« 1 1» ens bis, 

sifgE?B 3 ©-Zn&lttBBftatfSMSSfWB 3-ttTSB 2 ©£ 
*«MRft»ffT9»2A«««nRttff^S&. &2©a 
R«nRfctt8r$B2aB*«mffg¥ftfc. « 1 ©JS 

US. 

[0014] ntAV7 aaftmamatKBU, sEwm® 
ifa-r^teswffii. wans 1 ro-*(S]ttBa»gtif*a 

Wffi|*ti5«&3l^gt , b 1 05aKtff$fiS3)-Str.5« 1 

■bstsjafti-waa— ^isittwftsaffl-r as 2 

ftttBBSHJ'Pftt. S<tL.fe»2 0>ibC@?fi5^[c^|ffit« 
45 2©-Sifiittig»a-JS^sft-ft!fflS-e-. SB 1 ©JSSflHK 

l < tt±sT5S t> t c<& &n*«ai- J6f l wscm 2 <»->b-i«i 

50 *BME^8Blfl!)JS*«««ae*fti. fiJffififc-OBX 
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; 0465802 49 1 # 27/ 53 

&09? 1 1-234 262 



roiseTMff*ss]£2<rrfc?e 2 ©jim^st serf's. 

3 61c:. il&SESEWffitt, «?5©fiS«£ffi#-t3m2©» 
£ti?&ffif*?8:£> l6Sffi«©#aKm>&aWif8)« 

ST5£2©ifc£lBfE*t33^g!:i, SI 2 <Z>3#>tim%st 
Sfr5S2wa»fi5fBBt»¥K<!:. IS 1 ©JSWtiSffi* ±5 

ME$ 3 0-;mtmft»g$ftefFJH2eft:tt«fc£ 

[0015] R«a8onna»axttBMt. 3a#s*6 

[0 0 16] 3*£9efM!3t«lft;28Btt. SMtB6 
[0 0 17] sffjfcSJ 1 0 ©¥iJfflffl««sE«iHtt. 

[0 0 18] 

HWM *5EW©f0fflja#t&SE»Eti, XmtWlflFfll® 

[0 0 19] S9ttf«)flHl0>9Ef?Ta. SfSliUfn 
©K*^©WO&&s£&R*>EilT©fttH£'r.5. 

-[wo] • se-i #i£fi??8«»^&£;f=r 

sffisij-r-a fc*& ©WBtesra-r a . rj * wrafc t*r fw 

Ea*«#*Tffl*S*l*. 

[oo2i] ttftffiNRffa^au. MwettM-rsttM 



[0 0 2 2] aEWfi?ffl©31^ffitt. tffffttUMrftHM 

*»&. MiHi:ttmsniM««fft«. su© • 

#£-ra«&fc». {£fflfflEsest>^&T-#ifiHti3gR 

10 [0 0 2 31 'Sm0ttflm»|-8?Jftli. aSE^fi?«i:, 
-^^tMRettJHLfcttjltftenslB SEW 

[0 0 2 4] 83E$ffiti)ti$tt, SBiroifie^gE^SiS 

[00 2 5] 1 QfUfflnttWB&BTQfllJH fi* 

[0 0 2 6] SDWmttff^JRd. *LR*£*L. 8*1 

20 TSMfrBffctra. 

[0 0 2 7] ftttftliHBfi, * 2 ©jUs^JIW^SS 3 © 

25 [ 0 0 2 8 ] £ 3 a-ftnttHttlHI&fttt. JHMHR 

[0 0 2 9] ftSfflfMHrafttt, MBQ--;&tilttHft 

30 ©^3&£*£&&^«igW&££iS2?U aEWWffifcJR 

35 [0O3O1S3 0B.ffi¥RfiL *S1g?fiS3J 2 ©Eft 

[00313 !B2©-^i6ittpa^s?;^(4. tt&nw 

40 [0 0 3 2] fc&fi!f?fi*5SE8B«:. nfnB-£rt£Rft®R 

tiiBjtMw** t© t*ow«. 

[0 0 3 3] J»*5i2©fiJfflH»»SESSBT©«mii» 
©ttSEttistfaftsffitt. felT©®0Ttr*-5. 
45 [0 0" 3 4 ] fJfflKWWftSECWfi^Tm 2 ©®'fg^^ 

H«fc bfc^t? r^j?ta c: t tr«fc o , t*©isf ij«<jiar 

[0 0 3 S 3 a»«5ffiSt7.¥®:l±. a»ft±fi!5L. K«, 
50 Sc«tS*gfiJ©»H*l8S#-frTa»fi?«}fr5. 
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[00 36] B*SCSMB«tt. W, 2 Wiffi<g*K^ 6$3<0 

iBfi*^iejs'$n*. «2©a£^Dii6ti5«'gagiia 

[0 0 3 7] m3ro-^]iJttPa&sH?^g;K. ifeStiSStt 05 

[0 0 3 8] e«w«ttfl^Ra. fflrsBto-A^ttiaft 

©ftS*S*£83£Eft*ira?lit*«J?U S£Wffi«&* 10 
[0 0 3 9] S3«7)-*[6H4BaScS+S[^ati. SESEDItt 

CO 0 4 0 ] ffi 3 ©fflfi^&tt, JSS+S«£SB 2 ©am 

[oo4i] «2CD^nttnft3Micf«B, mmvrn 

[0 0 4 2] JSSfiSa^^&H, ffiS3©-:£l6HtK!R 

®ft&tts&ttsmM(iiftiB&«ffi8u satirise* 

[0 04 3] 82 0-*AttMftftg¥lftl*> a&iJifB 25 

[0044] JSS««ftSiEflStt. WE— *tSJttM»©B 

f'JJfljSi&a<fc3 *>©£$«£-$-$. 30 
[0045] tt*K30ttJfl£ttftSSR-rQflM3f« 

[0 046] CGWJfljSftttSKRtt. 1 *HL 

M*« 2 OflMMf^RRfcRtt® 

[0 047] {pS«7«©fftSf(:fflV^a£^S&fi!F«*© 35 

[ 0 0 4 8 ] M 3 a-2rft£HKft ftTOttt. SftWNR 
t>ftB^fcHRtt-#AttHR£9Jtil'rft. 

[0049] ernimn-n^ftii. Meo-^rMttnR 
satifTiieaft. «Atf»ttJsnRUi!Ec#L, jisnft 

[0 0 5 0 ] J$fftt4NjkX?lfttt. ffiWti?$S> SaKffif 50 



«S©&R. Kj&m«4>RJHMR£a&e*t[/r;ill0!>~ 
^rMJttHR§H5¥|£SjSfflL&ffli;. &JS£fiS?fi©ffiffl 
MRffitBSlftomBtf-RL,. *?CRMR££«i]ft£ 

sajfcE 4 onn aiMSRB-eaflji&feettKc&i* 

*fWBB, £TF©ffl 

[0051] i©f»jffla»«iaspii. HScai«tnu 

S*^3 ©*J/Hfi««SE&E£Glt8©*a&{g;l.&. 
[0 0 5 2] *SWa^3E?®T. *lJIJft«W*«feff> 
t«Jfe4h*:»dttt. KW&£.fc9aE!HftRfe*li 

[0 0 5 3] 3S*^5WfrJ«H««taiESfiS'C©?iJffla» 
[0 0 5 43 C©f9ffl5SHfr»a£RBtt» SJjRJHl&UL 
[0 0 5 5] K«1ff«tf&¥Rftefrt|*ttiaRy]*IKr 

[0 0 5 6] ttRtffett. secaesi#«s#tr. 
[o 0 5 7] nwft«ttXRiztune6a«MEftsma 
*rk»»w*. 

[0 0 5 83 B!OT6 0flWja«MMEWR7*0Hjilgft 

[ 0 0 5 9 3 m 1 asRttttaHKHHi. * i ©sir* 
£e&; u < t & s*lr fc kmhrbj* ^tsmmtrr 

[00603 satRmwa. si2©i§g^g:i>5Sf5 3© 

[0 0 6 1 ) $2©&RttRSf-g¥g|:tt, 5B2©a»* 
±&LT, Cn&SIMORRRft&l-*. 

[0 0 6 2) ®3©5b<swah> -82a8ttwmi2 
©ate^&ireirs'a. m 1 ©{s&tissfifH-js^&B. ^ 

£XT#enfc4S£strt#«&$i©js:sfiif 

1 0 0 6 3 3 SB 1 ©£S*S?fltt, SB 2 ®att*R* 6«5 
3 <Z>Mte¥®'\t&m2tU!>. % 3 ©-^|6]ttB8R?tJf 

ftttiRHfm^R^HUt-rftceiMi&wfeiii 

[0 0 6 4] 3EWffi«Jti7ffi , i ! ?3a¥aG. RKRimcfr 
*4aaii?'J©as»Jffi?KCW^:-rai£Wffi6!)fi5?6€«^r 

a. 

[0 0 6 5] SB2©**MMB»#*Rtt. fi92a©-AlSl 

W«;*«6a. KUT, t8 1 ©j$:ff«?«sit. {6 2©aS!«f 
R&K&nffiH«*ttlMlk:ML. ft 3 ©-A-[^ftBaR 
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«BBT1 1 -234262 



[0 0 6 6] fc;m£©ra&£«fcafttt*iti«i*©fc 
tttf. &i$©rtSttffi©£jg<>:)SSfifS©stS£tr-5. 

[00 67] MUtimmstit, Witemmmmztt 
sir*. 

ESS**©* C ktWU < t >b5H5i4MliBS^-p5i*i 

coo6 9] %2<o&&®mm^ms.. z.<o&&&2 

[ 0 0 7 0 ] f& 3 ©igftti, KSSfif&t 31 2 ®Btt 
[0 0 7 1] 1R2 0<-^ttHK]|tg7&tt. ksew^ 

[0 0 7 2] B&CHR&SEVtt. WK— #|flH4H»©B 

fujaafiwusa rotors. 

[0 0 7 3] 2S^®7 ®HJBKtttt;lElll2rc©*Mft* 
[0 0 7 43 !4ffiifMft<D«kKi=jfe£%. *2 03fi¥ft 
SUl: Uft««-3T«-»r *C 4: fc «fc 0 . lOWHettET 

[0075] &tttttR»g¥Btii. a»fe*jaEL. 

StSE«lfiJW3SiJtj¥^*#1i:TaKW«i-r5). 
[0 0 7 6] s£&»tt$8tt. SB2©M{a?-&^S35 3© 

[0 0 7 7 ] m 1 ©St8««3tK¥S:tt. 3S 1 ©«,&£ 

«. *e2©ffie^a^6S3©ae^s^tejsin 

[0 0 7 8] ft3©9ffi¥JKIl> »2©&j;»t#»Sjg2 

— immrj:- ■43fat¥M&&mm*&. 

to o 7 9 ] 8 1 ajsstffltst&HKtt. i«E©-ji,-mi 

[0 0 8 0 ] K 1 ®J&Stttt3tg¥ftH:> '>ft< 



[ o o 8 n « i ©issfssa, 35 2 «>aMra*>6fli 

an«r«k#b. fc*t'>a<&feara 
[00 82] snumnnBea^fttii. &a&«*ai;:'& 

10 5. 

[0 0 8 3] 352 ©i&«tfiffiStK*K«, MEO-ftm 

fi=ra&©^&£& 1 fc^Mi8«rtbra$B£*fc'S? u see© 
?8£#»5,, #^r, as i ©«?s*j«jj«, a$2©scsM$ 

K&tt&tiflNie&tttMfcttU at 3 O-rtflSHSB* 

[0 0 8 43 ffi*t/if&©W*£»ft&fcttntfj&9fc©fc 
V»te£±*UTJB2©jfcS#$RfcU flrit'©IK!ft£fSfc 
•frK, «JC©rtBMRl8©ffiKiJ5flf1i5«{©Sfff«ff'5. 

[00 8 5] ftftttinereftB. amnantmiz* 

©JoSre«T?£B£nfcfi??6!;:lSUT. 

[0086] as3 (D-ttomm&zm^mi.* uaum® 

[0 0 8 7] »2 0>««tMltt)![¥Stt. C09«efl(2 

©JE:Sie«i<i:-r-5. 

[0 0 8 8] SSoafi^Stt. #Sffi(S£tt2©B£ 

[oo89] m2©-^rpj<tB8»3h®¥JSij. wm.wm 

[0 0 9 0] iSSffWfcSttii. ttS~#fflttHK0tt 

[0091] 33*311 o©fdffla»tta-KsaT©nj«a 
[0092] -©spjfflamasiatt, »««6ft^L 

[0 0 9 3] SEWW««8¥a**t>ttJSl©&iWM«j 

[0 0 9 4] »l©K«iff«t>L<t±3{i«)j£;^a 

45 S&CiSCa^^trT"'"" 

[0095] msi&mmmzfai^m^mmm'sm. 

[0 0 9 63 

[52w©*es©jg«] KT^a^gsjfiwwwffiatttt 

50 K*Btt. fr>fhfe&mHMHl£tf!S. H«S 



- 8 - 



2005 11 14 10-29 



M 05-11-14:11 :26AM; 
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1 1 -2 3 4 2 6 2 



CO 0 9 7] affittUflHB5Ef?»tt, ftttftttOttKa 
CO 0 9 8] «K8B^Snseii^BS«ftf7?T. fdffl 

^&ttt*T&#titfitt&frtZ&tji)i\ MDS^SMA 

ft^tf.y hw*ae-r«citfc±!3. mds-^sha^ 
SB 1 O^iMi^ sjsrs 1 

S52CD^i&0tI SWM2 

» 1 0 attain s^jg 1 0 

C 0 1 0 1 1 [«i co^ifB^I] «T\ fR 1 03£a«[te^ 20 

[ 0 1 0 2 ] b 1 as 1 axiimotttf lx*$ 

fffitf tt««ll«ff 9 1 0 lias^S 2 0 ^SEntttttt 

[0103] xnmnifftKSEfrsi on. asiaH&v 
101, »^««'g?iSB 102, awfis*«affl 1 0 

3* W 1 0— SiftttStfMB 1 0 4, BWttM19«?tlftK 
1 0 5S&AytfflfeE^T^^ 

1 0 1 0 4 ] £«ftSJfttift9&fr3S 1 0 <D»a«>«*lttB 35 

i nrsshw*. 

CO 1 0 5] d^SCntt«lffi«(3Brr«l ott. 3E9IS3 

SE 1 0»fi«« 1 0 1 BEq9S3 0^&, a£gs&fiZt3 0 

Jfc A0>ttf S12) . fB 
Stt«ffaS 10 2H iSE^S52 3 0 «flHnT«fi«» 
5, s£9!KB3 0*t«»T*|E*fft««tt*"j'^ (SI 
3) o iKWinSffaffil 0 312, ffifU&MMt-&tttlftk 

„ ^-&ffiii\zi#K*&temmm (K)-®&mt*. &i 45 

(D-^fiftWSfrWES 10 413, 4:t>fMBW«fc 



Xft«*ttJWfcB&iMHLXittWT £o Sl- 
H8ttftS81Mf0a?fflj«t«UTJ3O, H9£J:VtH10 

CO 1 0 0] 
C£l] 

Si 
02 
02 
S3 

H4. W9 

05 

06 

06 

07 

BIS* 110 

(S 1 4) „ C©aW«JHHB*B, j& 1 1 0 I 

^saw»3 0fojs«sn« isu), 
[0106] «txs2 cm, aEnniffi«t»a2 0 1, a 

**f«»IMB2 0 2, K2<0-*lKlttH»gt-JStflB2 0 
3 , JSSimBttSS 2 0 4 tf 3B 2 {DjGMafiB 2 0 5 £ 

C 0 1 0 7 1 &a£2S2 0 tt, B^^3 0 fCKSMB«*» 

co i o 8] *a»2 o©»a<o8en»Bi 2i^^n 

C 0 1 0 9 ] SqSfittfiMffl 2 0 1 tS, l£#J0)5£tfJ^$g 
&WSLXH*. Stttfttftfftt2 0 2tt. Aft££tiK 
U AR£S9HMAftft2 0 1 *i«#-r**«©H9J 
«*i*flW-CjttW»«fcTS (fell 2 OS 2 1) 6 JL 
©MHWBtt, K2(93EfiA2D 5^&SnS3 OOSB 
3 0ig1aW3 0 S^t^B^ (S2 2) * $£?&2 
0»fiBB2 0 5ttXK!S3 0*SfiS*y&JS»fi5**a 
(S2 3) . {82«)-*|fiJttl(B>k8Hlitt2 0 3 

ffl^r^- iK®«««a»2 0 4tt fc -*rtttiH»«oaffli 

»«fl«*5fc<©£«£'t* (S2 4, S2 5) . 
CO 1 1 0] 3E9)»3 0tt. &BtffR«ffltt3 0 l, 3E 

#ftttBRM5« 3 0 4 *5J:lK35 3 ftiBfifiB 3 0 5 

conn sngsott* *a»2o*si*&ftx< 

3i»tt«l~»LX)*ffi<&^Tte 



- 9 - 



2005 11 14 10:29 



ffig 05-11-14:11 :26AM; 



; 046 5802 49 1 # 31/ 53 

$558^ 1 1 -2 34 2 6 2 



[0112] sees! 3 o vnmomtum 1 3 

[0 1 1 3 ] StSMHfttt. «2G)«£«2 0 5*>S»3 
CDS£&3 0 5^tGS$n-5 (S3 1) • 

[0 1 1 4) «gtg$ft&i$$3 0 ltt. 0(Cg 05 

*'«ftS«**«i»LTC^, Eqa«Sb1BAffl!03O 

W*Btt«*«:ttJRTr« (S3 2) . a9)tt«)1ff«»?M> 
SEffl«861»«56tf « 1 0*6X*LT^«o 353tf>-;& 
faftPR*tSESJ 3 0 4(1 tttttMftfli&a 3 0 1 io 

-*lftttHR£HfflT3 (S3 3) - 

03*1 - 'rtfa&w&tomKtt&tmMWitMt&m 

S«3 0 4tt. &H^&&lMm£ft«tiaftK&£ 

&-#fflttHR*»ffiU JE*««i-j--5- dGHSStS 

w»n 3 omim 3 o s lt^ses 2 0 <n$z 2 com 

MBB2 0 5fciS5fta (S 3 4 v S 3 5) « 20 

[ 0 1 1 6 ] » l ©SMfiWett. &ifl*S8!jti5$8 t 

[0 1 1 7 3 25 
[Rl] t iK- f (d, n) 

S2 0^&g£9I«3 0t=iS&Utt1#ftCI3, rfc&Ri: 

30 

[0 118] 

[ft 2] (n. r) 
[0 119] SBS3 Oil «T©»fffc J: 
K 

[0120] 35 
[S3] R=f (t + f (d, n) , r) 

[0121] 

[«4J t + f (d, n> »K-f (d, n> +f 40 
(d, n) =K 

[0 1 2 2] 

[K5] R- f (K, r) 



[0 1 2 31 «3ES2 Ottf (K. r) ^TgM 
[0124] [« 2 <0XJM] 2 GtfEfcWfco 



-*lpHtBB*S«t^SSgH*iS(Oa*W:Kl©j| 
[0 12 5] H2tt»2©SBJft*0©tti«ft«LTi5O» 

[0126] £^ttfl®2WttUflM&fTt> 1 o H 

[oi2 7] *me»2 on mi0ss««««pas2 o 

S. S£^2S3 0te, 82®fBffifimSJra3 0 6**9 
[0 1 2 83 ST, Wffl3S»©*aK:*A%. &2 0fl 

[0 12 9] KM*NMtt»2 0 2fl 4R***U 
■WWRH »2^aE@flS2 0 5 3 0 3 GO 

iB^S53 o s^fctygsn*. 

[0130] SE^Sg 3 0 <D» 2 a&BMBUISffiBSS 3 

aW*ttl»*B«:«*-rs. -e-LT*3fl!>-3!frMlttB»JH- 
3 0 4 H % 2 ®&8fi«Zfi#S 3 0 6 

*• 2? Sir, J8B««3MHB3 0 3fcL -Xfa&mtko) 
*o SB3©-*lfilttB8*Srt?S3 0 4H £<E>f;:, S£?5 

#i?t#$B£TSo ^©j6»««tt»3«>a«aj3o s* 

[0131] teg 2 o com 2 flo-iriaittnMfca-aca 2 
0 3n si ®&ett«tftfttt2 0 6 *t«j#-r*»fsffif 

'T-*lftttl»tta)3t#«* t ffiHttU ti?$B £ \zM LTffi 
0 4H -^lSlttHR<DJBffla«t, it«*!Wfii*tttt 
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[0 1 3 2 3 K2<D&Vmo&&7a h^Mz 

t v t gEt«aS(7)K9!^tt+*$a t d £&TcD i 5 Kfctt 

05 

[0 13 4] 
[ft6] 

t v=K- f (dv, n) 
t p = K- f (dp, n) 

[0 13 5] «S£SS2 0*&SH«3 0£$««IR^ 
Ctt, r^SLft^LT* 

[0136] 15 
[R7] C= (n, r) 

[0 1 3 7 3 ff$S3 0tt* KTO»ff^±0*«1S« 

[0 1 3 83 20 
[&83 R=f (tp+f (dp, n) , r) 

[0 13 91 

[R9] tp+f (dp, n) =K-f (dp. n) + 25 
f (dp, n) =K 

[0 1403 

[ftl 0] R=f (K. r) 

[0 14 1] ttXB2 0ft tv+f (dv, n) £St 
»LK**»* # *^Tff (K, r> -£*ATR£Jtl* 

[0 14 2] [*3®£llifl] t)*t»3«)*M«|^ 35 

[0 14 3] «3fi93KttMflE>«tta#:iSft2 0^JttM2: 
[0 14 4] £l>\ »3<»a««l©Ba^Pb3;nro 40 
[ 0 1 4 5 ] 35 3 ©SSlMrat* 2 0 CD&ijg*fi«j 

[0-1 4 6] - - - -- ^ 

[Rll] 

N=K- f (dv, n) 
t p = K- f (d p, n, L) 

ffi2O0)S«ff& dpttXfi&3O<0«tftiffi[. ntt 50 



fta-r^ftttwsagijrsew, l tiffin wjKssaiT^ 

[0 14 7] «5ES2 0*6ffiH83 0K:»&aflttto 

' [0 148] 
[ftl 2] C- (n, r) 

[0149] 3 0 tt, &TG>»#fc«J: 0 jgSttfH 

R£*tf>&„ 
[0 15 0] 
1*1 33 

R= (L, f (tp+f (dp, n, L) , r, L) ) 
[0151] 

[R14] tp+f (dp, n, L) =K-f (dp, 
n, L)+f (d p, n. L) =K 

[0 15 2] 

[ftl 5] R= <L. f (K, r. L) ) 

[0 15 3] &3ESI2 Ote, t v + f (d v, n) 
#LK£5jc*65 0 ^liTf (K, r) £;R8£)TR i It « 

[0 15 4] iC-Ctt«fflf|||HEiEL*«««*#ei(»fc 

[0 1 5 53 t*4W*li«] ^«Cfl|4©«l|«fcc> 

[0 15 6] H3te* ^40^SfiW©«5^ : g:^L>Ti5 

[0 15 7] S4^X|feH^dm^J:CJ^K¥IBtt 

{83©351S*lltln|i;T*S, tt&»2 O0Dtt-^8E2 O 8 
/A SEW»3 0**«fflH«t«r^-«» ( !:«ftafn>t«ft 

[01-5 8] --[*-5-<0*JIiW] :p|fK:» 5 ^ 

[0 15 9] H4tt, {B5(056Jg{SijC^tf5/i3£^^LTi3 

0, drowtr&oT* est 3 tw^j&iffiRiftzttMjs-ra 
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8B3 0 SfeSrt-T^a, 

[ o l 6 o ] «T» £ 5 (D#&moa$L7a V nMzz> 
C0 16 1] ^roSJE^JHttHOfctj*-*". »l-*4 
1 4 ^Jfi^COSjf^ ^>H 9 * * 

[0163] H5 (©a««y"Iftt, ttXS 2 0 ^SE^ffitt 
iff?Et vta^S83 0cOa£^«Bftiiffi^t p*filTfl<k5 

[0 1 64] 
Ufcl6] 

t v=K- f (dv, n) 
t p=K- f (d p, n, L) 

38 2 0 0>fB8«S, d p fiSEWS 3 0 ofteffiK* n « 

[0 16 5] «t3ES2 Ott, tv+f Cd v, n) £fff 
[0 16 6] tta»2 0>ji5awa3 0fcK5K»«« 
[0 16 7] 

[ftl 7] C= (n, I, r. s) 
TSS- lttttE»2 0fr&S93W3 0££« 

raw*, s a 

[0 16 8] 

»18] s« f (K, I , r> 
[0 16 9] 

[ftl 9] K' = tp+f (dp, n, L) 
»tf (K* , I, r) fcSHJU $itt«r*. s 
Lfc«*fclH 0 , I fc£trtff«*HH«S»S 3 0 
8 *. 

[0 17 0] 3E$Sg3 0tt, ^613, JiSSffi«R«A» 

[0171] 
[»20] 

R= (L. f (tp+f (dp. n, L) t r, L) ) 
KH»3 0#t, I£Lb^n«|«)ie«cp««H»UTt^ 

[0 17 2] - 

[ft2l] tp+f (dp, n, L) =K-f (dp. 
n , L) -f- f (dp, n * L) =K 

[0 17 3] 

[ft2 2] R- (L. f (K, r, L) ) 



[0174]»Tf (K. 'r) *#a&TR*fcfc«L. 

os [0175] mMtmzmhitmmik»^ 
[0 17 6] [#6«>3eiK«] t)«z»6©saiifljro 

10 ^3 0c^^«ti^^T#S«fc'5icU^ ; t>0[>"Cfc^o 
[0 17 7] H6tt, »6©MB««)«lfi£*-LT.fe 

HWfcttLfc. H6t*t»Tf4, &h£23 2 0 Iz* 1 <03xt 

w^fftJfa 2 0 9. mi o&$mmt&® 210^ 
is rxm 1 2 1 1 fcsttj* sobs 3 0 (rm 

2©a®4ti5«Sf3¥B83 0 9, ffi2©£«ft*(^StiB3 1 
0. ffi2©JS$ffif8ttSEA3 1 1 S-fctfrtSttfiffSHW 
3 1 2«S^Tt^. 

[0 17 8] £0*Jfc«Ttt. tt&tt&OttS-?* 

[0 17 9] wW*i6«©ttaE»2 0*±tfaW83 0 

©aa©ai£ntt^'*i*-h.H 1 4*3^^0 1 5 ic^stix 

25 [0 18 0] &SE§&2 0O«l©a»ffWR«-»8B2 0 9 

a* an u '>*c<fct>tBi©a»taM 

aKfiswt-rs (^ii4<7>s4i) o ^©attfiau, 

^2cOiffifs$2 0 5#5&WjB3 O0%3®£H3fflS3 0 

30 5Atessn<(> <S42, tai 5©ss i) . 
[0181] «Bf. as2a>aam*9MW3o 9a. & 

2 tT, £*l£S2©8fi*flf«iU S5 3 

©®fs^3 O 5£^LT&3£Sg2 0 (J8 2 OMMBi5 2 0 

5) ^asar* <ss 2, S4 3) . 

35 [0 18 2] «3E»2 0O«iroe*««a-JSB2 1 0 
81 3 0 KSatfcWfll t S« 2 ©-^filttlBftttff* 2 

40 *i©esiswBtt, »2coffl<aa2 o s^saw«3 0 
o*3(oafi«3 o 5A.tei8an^ (S4 4> ss 

3) . 

[0 18 3] SE^S3 0 ©«B 3 ©-STl6lttia»Sflf fB 3 

-45 «aM*Ml fc» U &B8gc£*a6 * ^ t < i *> 

[0 18 4] »««BW««8Saff 3 0 2tt, KRfiHIfz 

T$ (S5 4) . 
50 [ 0 1 8 5 ] SB 2 «J«;Stg*S^t©aS 3 1 0 tt, -*fltt 
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*fc#U JB3«>-*rtittWMttt»S3 0 4taWt. 
BBSTa (S5 5, S5 6) . «^i£<OW«^»fcS 

[o i s 6] Mflstttttfssa 1 AinasiHiimtr 

[0 18 7] S3 0>-^AttH|k»m3O4tt. 
flHii* «LWi6t»«*c#sn*J8ioa»ik:# 

-*flttW»«ffHU £2®>KSfiHIS|-lHE3 1 1 
tt, 2 0)&&1tiftt.+&. aS3O9teflB3 0 

6 a, 32 0££Wfi£jS2®ttKB2 0OJM{b«2 0 

(S5 7, S58s S45)) B 
[0188] #sm 2 0 ©SB 2 Hftftff » 2 

RajWHS*^ « 2 hsbu -a*r& 

S'&KiKojaiBjSjft^ftafcotflisrrs (S4 6, s 

47) . 

[0 18 9] JETF* *6©IMfi«a)gSE«)yah3^fc 

[ o 1 9 o ] sb 6 ©sasw-ett, smwmm t 

[0 19 1] 

[R2 3] t =K- f (d, n) 

[0 19 2] &iu££&2 0*&ffiWB3 Ofc»SSl<0H 
SNfWBCltt* rlSSL&tUT. 
[0 19 3] 

[ft 2 4] CI* (n, r 1) 

CO 1 9 4] 3EWS3 Ott. *a»2 0-v»2(O(H«Mif 

[0 19 5] 
[R2 5] C2-r2 
CdT. r 2tt»RT?»a, 

[0-1.9 6 ] tta£B2-0t*.- JB-l<Dj6*tiS«R n&gEig 
«8 3 0A,j8a. 

[0 19 7] 

[R2 6] Ri = Cm, f (K, r 2, m)') 
ZZLT\ m^*ftffi»2 Oi»6KWB3 0^i:<iat-fa« 
mil. fcijttf, fflffl0«£»&S:fi4«ST 



[0 19 8] 3E9JS3 0tt. TO3tJ?i:J: 0 ft* 
[0 19 9] 

05 [R2 7] K* = tp+f (dp, n) 

i-a**. 

[0 2 0 0] 3EW83 Ottf (K f , r 2. m) 
LX. R l<0*2JB£jfcflrrs. PWrtt*LH*£K 

[0 2 0 1] acti-e, aE^g33 0«»2<DJfc**«RR2 

15 

[0 2 0 2] 

[ft 2 8] R2= f (K' , r 1) 

20 [0 2 0 31 

[&29J R2= f (K, r) 

[0 2 0 4] *9E*2 0ttf (K, r) £5R#TR2<h 

[02051 [« 7 ^€\z^7 <r>?mm \z-? 

[0 2 0 6] £©»»«0>«SE8 2OB;* 2S6tf>3Sifcfll 

(05) <D«dttupA, si^sffiia«fif»a2 o 6 « 

JitfJS 1 affWffltt4HEfFS!32 0 7 $WT^. 3; 
35 fc. ifiEWB 3 0 tt» ffi2GD«ef!r«fi^8B3 0 6 (0 5 
OSfiFMffift^tt 3 0 1 ) &£Tffi2<DUVM9biim& 
&B3 0 7 (B6 9«««««»flB3 0 2) £*fbT^ 
5. H6te^X, g!5i:^f£^'r^ffln^^C^WIid^1 , ^^ 

40 [0 20 7) ^ OOTtt® afmWflHHSfrB 10H 

[0 2 0 8] MfflftfccottafcftSfcfe, %2aflfiffi2 

[0 2 0 9] &$EB2 0 com 1 OKVMIB&IStt&lffi 2 
50 [0 2 1 0 ] SB 1 iDtttt1ff«EiH-092 0 9 fit, « 1 ©SL 
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ttW*F 1 1 -2 3 4 2 6 2 



TasfctjS&t-ra. z.<Dtmmw&. %,zv>m®U2§ 

5 ftbWR® 3 0 <Dm 3 <omt£® 3 0 5 t«S*h 

a. 

CO 2 1 1] S91!K3O0!)»2OSMttffiStAa3 0 9 
n SB 2 UT, cnftJB2©SaoaMi«fti:'r 

<5o SB 3 0>aS<5&3 0 5ttv $B 2 oa»ffl®£&5£S 2 

0^2 coa<g# 205 fceanra. 

[0 2 12] #lUK2Q<DX2 4>-*15foimjk»tli&2 
0 3tt. Btt(ffttfi&»SE2 0 6 

[0 2 13) »la£^ffft)nB2 10(1 -*rttt 
»l(DI59W«irfSflE2 1 OH '>fc<<h*>?B 

[0 2 1 43 SE^3& 3 0 3 <D-;»fiHt BI»b«« 3 
0 4tt, «2(0ftffi1ffAft|#32 0 6at«#-r5fttt*} 

[0 2 15] tt2a&Hffitttt<R£3tt3 0 7tt, ttft 

[0 2 16] C2^j£«1firH»SCS3 1 OH -*rtrtt 
*V»"C % ffi 1 0£?Fffiflfif, S2a>3tlMfMR4: 

[0217] fl&tts&^gas 3 1 2n ««ja»mA^ 

[0 2 181 ^3<^) -^tt«»fffS»3 0 4tt, 

IftttHftftH/fl U *2 0>jfegffl«frJI«3 1 on £ 
©«*»2©JS**S«Bt-j-S. Wj3(Dmmm3 0 5n 
BSfl**»2©iffif3<IB2 0 S'MSirJ'B. 
[0219] 2 0 (D® 2 fflttKKStJMB 2 



[0220] n t^«sflr«tt2S2 1 1 it. -*frrtt 

[0 2 2 UJKT. SBTOSaBMoaK^nhajHct) 
05 V»TBWTS. 

[0 2 2 2] m7©*»HTtt. 4fe&itoa8ttnffi« 

t v tSE?ga&05S£^©)t^S t p S«T«> J: 5 fctf£* 
a. 

[0 2 2 3] 
10 [&3 0] 

t v = K- f (dv, n ) 
t p-K- f (dp, n) 

is cr««enMT«e«Tfi«. 

[0224] &fcm2 saws 3 oi^3i5«i©a 

&{fr&C in r 1 fcftRfc tT, 
[0 2 2 5] 

[S3 l)Cl=(n, r 1) 

20 

[0 2 2 6] 3 0aEW35ttv fB 2 OKRWffi C 2 

[0 2 2 7] 
[*3 2] C2 = r 2 
25 r 2 

[0 2 2 8] &3E&2 0«, tv+f (d v. n) &gf 

IS* R 1 
[0 2 2 9] 

30 BR3 31 Rl=(m, f (K. r 2. m) ) 

mtttta«2 0A*6ittK*3 O^tgaTT^B 

[0 2 3 0] mW&3 Ott, &~F3?of Jfllcfc 0 K * fe* 

35 [0 2 3 1 ] 

[ft34] K' «tp+f (dp. n) 

[0 2 3 2] a£«B3 0»r (K* , r 2, m) 
n «S88 2 0*»&e3Sa*lft:««m(CLfc^K &SE 

45 [0 2 3 31-*l»t;- KWB3 014S2 0JS«««R 2 
[0 2 34] 

[#3 5] R2- f (K* , r 1) 
50 n K' liKWffiffKt-at. 
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[0 2 3 5] 

[R3 6] R2 = f (K, r) 

C0 2 3 6]^S£S2O^f (K, r) &**TR2^ 

msmmmm*. nnommmz^Tmmtmm 
[0 2 3 7] ar, W8a}*»«©«jE^PhD^fct) 

CO 2 3 8] te8<0%mwx?\t* ttff»2 O0jKWttn 

CO 2 3 9] 
C»37] 

t v = K- f (d v. n) 
t p = K- f (dp, n, L) 

CC-C. KttSBM. ftt-*ftttHR. dvl»S 

[0 2 4 0] ^SES§2 0*>6SEWS3 OlCS^^l WSC 
WiClH r l^fUkLUX. 
[0 2 4 1] 

[S3 8] Cl=(n, r 1) 

[0 2 4 2] SEW*3 0^6«a»2 0icaJ5»2OK 
■MB«C 2 tt, r 2£SL&iLT* 
[0 2 4 3] 
[»3 9] C2-r 2 

[0 244J &&§82 0«, tv+f (dv, n) £fr 
10 24 5] 

[K4 0] R 1= (m. f (K, r 2, m) ) 

[0 2 4 6] SEBjjS3 0tt, HTOffl-»K«tOK' S# 
[0 2 4 7] 

[*4 1] K* - t p+ f (dp. n) 

[0 2 4 8] SEHStttf (K' . r 2, m) *3H?l, 
ft3£S»2 0*»6e3SSn&tt*BmtcLfc3&tK -Bart"'* 



3S3 0ttjB2«)SSSffi«R2 6A««. 
[0 2 49] 

[JS4 23 R2= (L, f (tp+f (dp, n, 
L) t r. L) ) 
05 R«B3 0 3^iEUUKW«»«*t p&«»LT^J5» 
frKtt. K* ttKWJWBK KHSU 
C0 2 5 0] 

»4 3] R2 = (L. f <K. r. L) ) 

10 [0 2 5 1] ttX82 0a, t v+ f (d v, n) £ah 
StK$:^ 0 *^T'f <K, r) £#«>TR 2 <75?g 

15 [0 2S2] ^CT?t4ttffl*J|HE»L3fl(«ffiffl*#«:faft 
t^5^«W J £*»a»2 0 ttf) t Lfc^, SEE 

[0 2 5 3] [ffi9 4MMl KBO&ttflttt 118® 

a*«K45^T«fflE»2 0 lr«^ffi2 0 8 

[0 2 5 4] »9<03UMflTtt, S5«r«fc«kWft3£^ 
[0255] [SB 1 0 OftBM] ? jftrX 1 0 

»^Ta^, c:©s5is«r4SJffliB«5i«ffaTS§ 

[0 2 5 6] 0 8lt mi 0©«»«IC«J**^LT4 
0, £©Bfci5V>T. B7fcJ*(5+«B3r^>4*f* , r* 

35 3 0 8ft»ttT^«>. 
35 C0 2 5 7] Jt^T. 35 1 0 ©ftKWflfiBffirn h 3 Mz 

[0 2 5 8] i<7)«K¥K»4Hl O^fc^ST. ms^iS 
40 C 0 2 5 9 ] ^ 1 0 <0SUIS«|Ttt* ttKB^Snttttlffi 

[0 2 6 0] 
[*4 4J 

45 t v = K- f (dv, n)- 
t p = K- f (dp. n. L) 

232 0<Bf*©t£?8, dpftK«83 0C9tt«fm. ntt 

50 *. tfffiH?IISlSa?Lt4. fct^tfttffliB«fe*rey h 
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(54) UTILIZATION QUALIFICATION VERIFYING DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To perform high-speed authentication 
through a device of a small CPU power memory. 
SOLUTION: A test information calculating part 202 of a verifier 20 
generates a random number, and transmits both the random 
number and information on the identification of right to a testifier 
10 as test information. A third unidirectional function calculating 
part 304 of the testifier 10 applies a unidirectional function to the 
right identification information of secret information and test 
information held by a secret information holding part 301. A 
response information calculating part 303 finds evidence 
information by operating the calculated result of the unidirectional 
function and evidence support information. Further, the third 
unidirectional function calculating part 304 applies a unidirectional 
function to the evidence information and the random number 
contained in the test information and returns them to the verifier 
20 as response information. A second unidirectional function 
calculating part 203 of the verifier 20 applies a unidirectional 
function to the evidence information and the random number in the 
test information. A response information verifier 204 compares the 
applied result of the unidirectional function with the response information, and only when they are 
coincident, qualification to utilization is confirmed. 
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CLAIMS 



[Claim(s)] 

[Claim 1] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section said certification auxiliary 
information issue section A certification information management means to manage the certification 
information used in the case of authentication of use rating, On the other hand, the 1st [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ the confidential information management tool which manages secret information, and asking for 
an inverse function from the confidential information which said confidential information management tool 
manages at least ] The confidential information which said confidential information management tool manages, 
and said 1 st certification auxiliary information count means to calculate certification auxiliary information 
based on the count result of a tropism function count means on the other hand, It has the 1 st means of 
communications which transmits and receives information in process of count of certification auxiliary 
information. Said verification section A certification information maintenance means to hold certification 
information, and a trial information count means to calculate trial information, On the other hand, the 2nd 
[ difficult in computational complexity at least ] which applies a tropism function on the other hand A tropism 
function count means, [ asking for an inverse function ] The certification information which said certification 
information maintenance means holds, and a response indication verification means to inspect whether the 2nd 
[ said ] result on which the tropism count means was made to act on the other hand, and a response indication 
are equal to the value acquired based on a part or all of trial information, It has the 2nd means of 
communications which transmits and receives information in process of authentication of use rating. Said 
certification section A confidential information maintenance means to hold secret information, and a 
certification auxiliary information management means to manage the certification auxiliary information that it 
uses for count of a response indication, On the other hand, the 3rd [ difficult in computational complexity at 
least ] which applies a tropism function on the other hand A tropism function count means, [ asking for an 
inverse function ] A part or all of trial information, and the confidential information which said confidential 
information maintenance means holds, To the value acquired based on the certification auxiliary information 
which said certification auxiliary information management means manages, said 3rd response indication count 
means to calculate a response indication by on the other hand making a tropism function count means act, Use 
rating verification equipment characterized by having the 3rd means of communications which transmits and 
receives information in process of the process of authentication of use rating, and certification auxiliary 
information count. 

[Claim 2] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section said certification auxiliary 
information issue section A certification information management means to manage the certification 
information used in the case of authentication of use rating, On the other hand, the 1st [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ the confidential information management tool which manages secret information, and asking for 
an inverse function from the confidential information which said confidential information management tool 
manages at least ] The confidential information which said confidential information management tool manages, 
and said 1 st certification auxiliary information count means to calculate certification auxiliary information 
based on the count result of a tropism function count means on the other hand, It has the 1st means of 
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communications which transmits and receives information in process of count of certification auxiliary 
information. Said verification section The 1 st confidential information maintenance means holding secret 
information, and the 1 st certification auxiliary information management means which manages certification 
auxiliary information, On the other hand, the 2nd to which a trial information count means to calculate trial 
information, and asking for an inverse function apply a directivity function difficult in computational 
complexity at least A tropism function count means, The confidential information which said 1st confidential 
information maintenance means holds, and a response indication verification means to inspect whether the 2nd 
[ said ] result on which the tropism count means was made to act on the other hand, and a response indication 
are equal to the value acquired based on a part or all of trial information, It has the 2nd means of 
communications which transmits and receives information in process of authentication of use rating. Said 
certification section The 2nd confidential information maintenance means holding secret information, and the 
2nd certification auxiliary information management means which manages the certification auxiliary 
information that it uses for count of a response indication, On the other hand, the 3rd [ difficult in computational 
complexity at least ] which applies a tropism function on the other hand A tropism function count means, 
[ asking for an inverse function ] A part or all of trial information, and the confidential information which said 
2nd confidential information maintenance means holds, To the value acquired based on the certification 
auxiliary information which said 2nd certification auxiliary information management means manages, said 3rd 
response indication count means to calculate a response indication by on the other hand making a tropism 
function count means act, Use rating verification equipment characterized by having the 3rd means of 
communications which transmits and receives information in process of the process of authentication of use 
rating, and certification auxiliary information count. 

[Claim 3] It is use rating verification equipment carry out containing use limit description in count of the 
response indication generate at the certification auxiliary information are use rating verification equipment of 
claim 1 thru/or claim 2, combine with certification information and said certification information-management 
means manages the use limit description which is the information which shows use conditions, and combine 
with certification auxiliary information, and said certification auxiliary information-management means 
manages use limit description, and use at said certification section, and said certification section as the 
description. 

[Claim 4] Use rating verification equipment characterized by decoding information, using the value acquired 
from certification information or certification information as a decode key of said decode means when it judges 
with it being use rating verification equipment of claim 1 thru/or claim 3, and having a decode means, and there 
being use rating. 

[Claim 5] It is use rating verification equipment have the hysteresis management tool which is use rating 
verification equipment of claim 1 thru/or claim 4, and manages the hysteresis at the time of use rating 
verification, and combine with certification information or certification auxiliary information, and a certification 
information maintenance means or the 1st certification auxiliary information-management means manage 
transfer information, and carry out that trial information stores said transfer information to a hysteresis 
management tool at the time of use rating verification including transfer information further as the description. 
[Claim 6] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section said certification auxiliary 
information issue section A certification information management means to manage the certification 
information used in the case of authentication of use rating, On the other hand, the 1 st [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ the confidential information management tool which manages secret information, and asking for 
an inverse function from the confidential information which said confidential information management tool 
manages at least ] The confidential information which said confidential information management tool manages, 
and said 1st certification auxiliary information count means to calculate certification auxiliary information 
based on the count result of a tropism function count means on the other hand, It has the 1st means of 
communications which transmits and receives information in process of count of certification auxiliary 
information. Said verification section A certification information maintenance means to hold certification 
information, and the 1st trial information count means which calculates the 1st trial information, On the other 
hand, the 2nd [ difficult in computational complexity at least ] which applies a tropism function on the other 
hand A tropism function count means, [ asking for an inverse function ] To the 2nd trial information which 
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received, said 2nd response indication count means [ 1st ] which a tropism function count means is made to act 
on the other hand, and calculates the 1 st response indication, The 1 st response indication verification means 
which inspects whether the 2nd [ said ] result on which the tropism count means was made to act on the other 
hand, and the 2nd response indication are equal to the value acquired based on a part or all of the certification 
information which said certification information maintenance means holds, and the 1st trial information, It has 
the 2nd means of communications which transmits and receives information in process of authentication of use 
rating. Said certification section A confidential information maintenance means to hold secret information, and 
a certification auxiliary information management means to manage the certification auxiliary information that it 
uses for count of a response indication, The internal-state management tool which manages the internal state 
corresponding to certification auxiliary information, and the 2nd trial information count means which calculates 
trial information, On the other hand, the 3rd [ difficult in computational complexity at least ] which applies a 
tropism function on the other hand A tropism function count means, [ asking for an inverse function ] A part or 
all of the received information, and the confidential information which said confidential information 
maintenance means holds, To the value acquired based on the certification auxiliary information which said 
certification auxiliary information management means manages, said 3rd response indication count means 
[ 2nd ] which calculates the 2nd response indication by on the other hand making a tropism function count 
means act, The 2nd trial information count means which calculates the 2nd trial information, and part or all of 
the 1st response indication and the 2nd trial information, To the value acquired based on the confidential 
information which said confidential information maintenance means holds, and the certification auxiliary 
information which said certification auxiliary information management means manages Use rating verification 
equipment characterized by having the 3rd [ said ] result on which the tropism function count means was made 
to act on the other hand, whether a response indication is equal and the 2nd response indication verification 
means to inspect, and the 3rd means of communications which transmit and receive information in process of 
the process of authentication of use rating, and certification auxiliary information count. 

[Claim 7] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section said certification auxiliary 
information issue section A certification information management means to manage the certification 
information used in the case of authentication of use rating, On the other hand, the 1 st [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ the confidential information management tool which manages secret information, and asking for 
an inverse function from the confidential information which said confidential information management tool 
manages at least ] The confidential information which said confidential information management tool manages, 
and said 1 st certification auxiliary information count means to calculate certification auxiliary information 
based on the count result of a tropism function count means on the other hand, It has the 1 st means of 
communications which transmits and receives information in process of count of certification auxiliary 
information. Said verification section The 1 st confidential information maintenance means holding secret 
information, and the 1 st certification auxiliary information management means which manages certification 
auxiliary information, On the other hand, the 2nd [ difficult in computational complexity at least ] which applies 
a tropism function on the other hand A tropism function count means, [ the 1st trial information count means 
which calculates the 1 st trial information, and asking for an inverse function ] To the 2nd trial information 
which received, said 2nd response indication count means [ 1st ] which a tropism function count means is made 
to act on the other hand, and calculates the 1st response indication, The 1st response indication verification 
means which inspects whether the 2nd [ said ] result on which the tropism count means was made to act on the 
other hand, and the 2nd response indication are equal to the value acquired based on a part or all of the 
certification information which said certification information maintenance means holds, and the 1 st trial 
information, It has the 2nd means of communications which transmits and receives information in process of 
authentication of use rating. Said certification section The 2nd confidential information maintenance means 
holding secret information, and the 2nd certification auxiliary information management means which manages 
the certification auxiliary information that it uses for creation of a response indication, The internal-state 
management tool which manages the internal state corresponding to certification auxiliary information, and the 
2nd trial information count means which calculates trial information, On the other hand, the 3rd [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ asking for an inverse function ] A part or all of the received information, and the confidential 
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information which said confidential information maintenance means holds, To the value acquired based on the 
certification auxiliary information which said certification auxiliary information management means manages, 
said 3rd response indication count means [ 2nd ] which calculates the 2nd response indication by on the other 
hand making a tropism function count means act, The 2nd trial information count means which calculates the 
2nd trial information, and part or all of the 1 st response indication and the 2nd trial information, To the value 
acquired based on the confidential information which said confidential information maintenance means holds, 
and the certification auxiliary information which said certification auxiliary information management means 
manages Use rating verification equipment by which it is characterized [ which has the 3rd / said / result on 
which the tropism function count means was made to act on the other hand, whether a response indication is 
equal and the 2nd response indication verification means to inspect, and the 3rd means of communications 
which transmit and receive information in process of the process of authentication of use rating, and 
certification auxiliary information count ]. 

[Claim 8] It is use rating verification equipment carry out containing use limit description in count of the 
response indication generated in the certification auxiliary information are use rating verification equipment of 
claim 6 thru/or claim 7, combine with certification information and a certification information-management 
means manages the use limit description which is the information which shows use conditions, and combine 
with certification auxiliary information, manage a certification auxiliary information-management means and 
use limit description, and use at the certification section, and the certification section as the description. 
[Claim 9] Use rating verification equipment characterized by decoding information, using the value acquired 
from certification information or certification information as a decode key of said decode means when it judges 
with it being use rating verification equipment of claim 6 thru/or claim 8, and having a decode means, and there 
being use rating. 

[Claim 10] It is use rating verification equipment have the hysteresis management tool which is use rating 
verification equipment of claim 6 thru/or claim 9, and manages the hysteresis at the time of use rating 
verification, and combine with certification information or certification auxiliary information, and a certification 
information maintenance means or the 1 st certification auxiliary information-management means manage 
transfer information, and carry out that trial information stores said transfer information to a hysteresis 
management tool at the time of use rating verification including transfer information further as the description. 



[Translation done.] 
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* NOTICES * 

JPO and NCI PI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original precisely. 
2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the use rating verification equipment which verifies use rating. 
[0002] 

[Description of the Prior Art] Along with network progress, the intellectual property expressed by the digital 
information of software, multimedia data, etc. is increasing by leaps and bounds, and even if reproducing 
simply comes out of digital information and it copies unjustly, a trace does not remain at all. For this reason, 
protection of the copyright about digital information poses a problem. 

[0003] A ticket is one of those which are daily used as a thing showing the right of use, and digitization of a 
ticket is also tried. However, there is the same problem as the above-mentioned protection of copyrights. 
[0004] As a Prior art which verifies use rating of software, there is a technique currently indicated on the U.S. 
Pat. No. 5,586,186 number specifications. (It is hereafter called the conventional technique.) Although this 
technique realizes the access control of software, it can be used also for digitization of a ticket by checking use 
rating by the enciphered given information being decoded correctly instead of decoding the enciphered 
software. 

[0005] With the conventional technique, it distributed, where software is enciphered, and when a user wishes 
use of this software, the approach of purchasing the information (user key) for decoding from a software vendor 
is taken. RSA (Rivest-Shamir-Adleman) public key encryption is used for encryption, and the value acquired by 
performing a predetermined operation is used for the private key and user identification information of a RSA 
public key pair as a user key. 
[0006] 

[Description of the Prior Art] Since the conventional technique is the authentication method of the RSA base, 
there is much computational complexity. BruceSchneier and Applied according to Cryptography (Second 
Edition), Wiley, and 1996 ~ a workstation (SPARC2) — law — as for the time amount which processes 1024-bit 
data using the RSA cryptosystem of number 1024 bit and, and 8 bits of public keys, as for verification, the 
signature has taken 0.08 seconds for 0.97 seconds. For this reason, as compared with a workstation like an IC 
card, there is a problem of taking time amount for authentication, with equipment with little [ far ] CPU power 
memory. 
[0007] 

[Problem(s) to be Solved by the Invention] This invention was made in view of the above-mentioned problem, 
and makes a technical problem implementation of the use rating verification equipment which can be attested 
also with equipment with little CPU power memory like an IC card at a high speed. 
[0008] 

[Means for Solving the Problem] In order to solve said technical problem, the use rating verification equipment 
of claim 1 has the certification auxiliary information issue section, the verification section, and the certification 
section. And on the other hand, said certification auxiliary information issue section has the 1 st tropism function 
count means and certification auxiliary information count means calculate certification auxiliary information 
used for a certification information-management means manage the certification information used in the case of 
authentication of use rating, the confidential-information management tool which manages secret information, 
and count of certification auxiliary information, and the 1st means of communications. Moreover, on the other 
hand, said verification section has the certification information maintenance means [ to hold certification 
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information ], trial information count means [ to calculate trial information ], and 2nd tropism function count 
means and response indication verification means to verify a response indication, and the 2nd means of 
communications. Furthermore, on the other hand, said certification section has the confidential information 
maintenance means [ to hold confidential information ], certification auxiliary information management means 
[ to manage certification auxiliary information ], and 3rd tropism function count means and response indication 
count means to calculate a response indication, and the 3rd means of communications. 
[0009] Moreover, the use rating verification equipment of claim 2 has the certification auxiliary information 
issue section, the verification section, and the certification section. And on the other hand, said certification 
auxiliary information issue section has the 1 st tropism function count means and certification auxiliary 
information count means to calculate certification auxiliary information used for a certification information 
management means to manage certification information, the confidential information management tool which 
manages secret information, and count of certification auxiliary information, and the 1 st means of 
communications. Moreover, on the other hand, said verification section has the 1 st confidential information 
maintenance means [ holding confidential information ], 1st certification auxiliary information management 
means [ which manages certification auxiliary information ], trial information count means [ to calculate trial 
information ], and 2nd tropism function count means and response indication verification means to verify a 
response indication, and the 2nd means of communications. Furthermore, on the other hand, said certification 
section has the 2nd confidential information maintenance means [ holding confidential information ], 2nd 
certification auxiliary information management means [ which manages certification auxiliary information ], 
and 3rd tropism function count means and response indication count means to calculate a response indication, 
and the 3rd means of communications. 

[0010] The use rating verification equipment of claim 3 is use rating verification equipment of claim 1 thru/or 
claim 2, it combines with certification information and a certification information-management means manages 
the use limit description it is the information use conditions are shown, it combines with certification auxiliary 
information, a certification auxiliary information-management means manages use limit description, and use 
limit description contains in count of the response indication generated in the certification auxiliary information 
use at said certification section, and said certification section. 

[001 1] The use rating verification equipment of claim 4 is use rating verification equipment of claim 1 thru/or 
claim 3, is equipped with a decode means, and when it judges with there being use rating, it decodes 
information, using the value acquired from certification information or certification information as a decode key 
of said decode means. 

[0012] The use rating verification equipment of claim 5 is use rating verification equipment of claim 1 thru/or 
claim 4, it has the hysteresis management tool which manages the hysteresis at the time of use rating 
verification, and it combines with certification auxiliary information, the 1st certification auxiliary information- 
management means manages transfer information, and trial information stores said transfer information to a 
hysteresis management tool including transfer information at the time of use rating verification further. 
[0013] The use rating verification equipment of claim 6 has the certification auxiliary information issue section, 
the verification section, and the certification section. And a certification information management means to 
manage the certification information which uses said certification auxiliary information issue section in the case 
of authentication of use rating, On the other hand, the 1st [ difficult in computational complexity at least ] which 
applies a tropism function on the other hand A tropism function count means, [ the confidential information 
management tool which manages secret information, and asking for an inverse function from the confidential 
information which said confidential information management tool manages at least ] It has the confidential 
information which said confidential information management tool manages, said 1 st certification auxiliary 
information count means to calculate certification auxiliary information based on the count result of a tropism 
function count means on the other hand, and the 1 st means of communications which transmit and receive 
information in process of count of certification auxiliary information. Moreover, a certification information 
maintenance means by which said verification section holds certification information and the 1st trial 
information count means which calculates the 1 st trial information, On the other hand, the 2nd [ difficult in 
computational complexity at least ] which applies a tropism function on the other hand A tropism function 
count means, [ asking for an inverse function ] To the 2nd trial information which received, said 2nd response 
indication count means [ 1 st ] which a tropism function count means is made to act on the other hand, and 
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calculates the 1st response indication, The 1st response indication verification means which inspects whether 
the 2nd [ said ] result on which the tropism count means was made to act on the other hand, and the 2nd 
response indication are equal to the value acquired based on a part or all of the certification information which 
said certification information maintenance means holds, and the 1st trial information, It has the 2nd means of 
communications which transmits and receives information in process of authentication of use rating. 
Furthermore, a confidential information maintenance means to hold the information that said certification 
section is secret, A certification auxiliary information management means to manage the certification auxiliary 
information that it uses for creation of a response indication, The internal-state management tool which 
manages the internal state corresponding to certification auxiliary information, and the 2nd trial information 
count means which calculates trial information, On the other hand, the 3rd [ difficult in computational 
complexity at least ] which applies a tropism function on the other hand A tropism function count means, 
[ asking for an inverse function ] A part or all of the received information, and the confidential information 
which said confidential information maintenance means holds, To the value acquired based on the certification 
auxiliary information which said certification auxiliary information management means manages, said 3rd 
response indication count means [ 2nd ] which calculates the 2nd response indication by on the other hand 
making a tropism function count means act, The 2nd trial information count means which calculates the 2nd 
trial information, and part or all of the 1 st response indication and the 2nd trial information, To the value 
acquired based on the confidential information which said confidential information maintenance means holds, 
and the certification auxiliary information which said certification auxiliary information management means 
manages It has the 3rd [ said ] result on which the tropism function count means was made to act on the other 
hand, whether a response indication is equal and the 2nd response indication verification means to inspect, and 
the 3rd means of communications which transmit and receive information in process of the process of 
authentication of use rating, and certification auxiliary information count. 

[0014] The use rating verification equipment of claim 7 has the certification auxiliary information issue section, 
the verification section, and the certification section. And a certification information management means to 
manage the certification information which uses said certification information issue section in the case of 
authentication of use rating, On the other hand, the 1 st [ difficult in computational complexity at least ] which 
applies a tropism function on the other hand A tropism function count means, [ the confidential information 
management tool which manages secret information, and asking for an inverse function from the confidential 
information which said confidential information management tool manages at least ] The confidential 
information which said confidential information management tool manages, and said 1 st certification auxiliary 
information count means to calculate certification auxiliary information based on the count result of a tropism 
function count means on the other hand, The 1st means of communications which transmits and receives 
information in process of count of certification auxiliary information, and the 1st confidential information 
maintenance means holding secret information, The 1 st certification auxiliary information management means 
which manages certification auxiliary information, and the 1 st trial information count means which calculates 
the 1 st trial information, On the other hand, the 2nd [ difficult in computational complexity at least ] which 
applies a tropism function on the other hand A tropism function count means, [ asking for an inverse function ] 
To the 2nd trial information which received, said 2nd response indication count means [ 1 st ] which a tropism 
function count means is made to act on the other hand, and calculates the 1st response indication, The 1st 
response indication verification means which inspects whether the 2nd [ said ] result on which the tropism count 
means was made to act on the other hand, and the 2nd response indication are equal to the value acquired based 
on a part or all of the certification information which said certification information maintenance means holds, 
and the 1st trial information, It has the 2nd means of communications which transmits and receives information 
in process of authentication of use rating. Furthermore, the 2nd confidential information maintenance means 
holding the information that said certification section is secret, The 2nd certification auxiliary information 
management means which manages the certification auxiliary information that it uses for creation of a response 
indication, The internal-state management tool which manages the internal state corresponding to certification 
auxiliary information, and the 2nd trial information count means which calculates trial information, On the 
other hand, the 3rd [ difficult in computational complexity at least ] which applies a tropism function on the 
other hand A tropism function count means, [ asking for an inverse function ] A part or all of the received 
information, and the confidential information which said confidential information maintenance means holds, To 
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the value acquired based on the certification auxiliary information which said certification auxiliary information 
management means manages, said 3rd response indication count means [ 2nd ] which calculates the 2nd 
response indication by on the other hand making a tropism function count means act, The 2nd trial information 
count means which calculates the 2nd trial information, and part or all of the 1 st response indication and the 2nd 
trial information, To the value acquired based on the confidential information which said confidential 
information maintenance means holds, and the certification auxiliary information which said certification 
auxiliary information management means manages It has the 3rd [ said ] result on which the tropism function 
count means was made to act on the other hand, whether a response indication is equal and the 2nd response 
indication verification means to inspect, and the 3rd means of communications which transmit and receive 
information in process of the process of authentication of use rating, and certification auxiliary information 
count. 

[0015] The use rating verification equipment of claim 8 is use rating verification equipment of claim 6 thru/or 
claim 7, it combines with certification information and a certification information-management means manages 
the use limit description it is the information use conditions are shown, it combines with certification auxiliary 
information, a certification auxiliary information-management means manages use limit description, and use 
limit description contains in count of the response indication generated in the certification auxiliary information 
use at said certification section, and said certification section. 

[0016] The use rating verification equipment of claim 9 is use rating verification equipment of claim 6 thru/or 
claim 8, is equipped with a decode means, and when it judges with there being use rating, it decodes 
information, using the value acquired from certification information or certification information as a decode key 
of said decode means. 

[0017] The use rating verification equipment of claim 10 is use rating verification equipment of claim 6 thru/or 
claim 9, it has the hysteresis management tool which manages the hysteresis at the time of use rating 
verification, and it combines with certification auxiliary information, the 1st certification auxiliary information- 
management means manages transfer information, and trial information stores said transfer information to a 
hysteresis management tool including transfer information at the time of use rating verification further. 
[0018] 

[Function] The use rating verification equipment of this invention performs issue of certification auxiliary 
information, and verification of use rating. 

[0019] In issue of certification auxiliary information, each means carries out the following operations for any 
use rating verification equipment of a claim. 

[0020] The information for identifying what kind of right is published by the 1st means of communications to 
which device that has a confidential information maintenance means is received. When there is use limit 
description which restricts this right in a period etc., it is collectively specified by use limit description at this 
time. 

[0021] A confidential information management tool searches the confidential information which the 
confidential information maintenance means of this device holds from the information which identifies a 
device. 

[0022] A certification information management means retrieves the certification information corresponding to 
this right from the information which identifies a right. On the other hand, at least, to this confidential 
information and this right identification information, while the 1st thing to search for for an inverse function is 
difficult for a tropism function count means in computational complexity at least, it applies a tropism function. 
When use limit description exists, on the other hand, a tropism function is applied also including use limit 
description. 

[0023] A certification auxiliary information count means calculates certification auxiliary information based on 
this certification information and the value acquired as a result of applying a tropism function on the other hand. 

[0024] It is transmitted from the 1st means of communications, and this certification auxiliary information is 
transmitted to the means of communications of this device, and is stored in the certification auxiliary 
information management means of this device. 

[0025] The operation in verification of use rating in the use rating verification equipment of claim 1 is as 
follows. 
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[0026] A trial information count means generates a random number, combines with this random number the 
identification information of the right which a certification information maintenance means holds, and makes it 
trial information. 

[0027] This trial information is transmitted to the 3rd means of communications from the 2nd means of 
communications. A certification auxiliary information management means retrieves the certification auxiliary 
information corresponding to the identification information of the right contained in this trial information. 
[0028] A tropism function is applied while it is difficult in computational complexity at least to ask for an 
inverse function from the 3rd confidential information to which a confidential information maintenance means, 
on the other hand, holds a tropism function count means, and this right identification information. 
[0029] A response indication count means calculates the count result of the aforementioned one direction nature 
function, and this certification auxiliary information, and searches for certification information. On the other 
hand, to the random number of this certification information and this trial information, while the 3rd thing to 
search for for an inverse function is difficult for a tropism function count means in computational complexity at 
least, it applies a tropism function, and it makes it a response indication. 

[0030] The 3rd means of communications transmits a response indication to the 2nd means of communications. 
[0031] On the other hand, to the random number of this certification information and this trial information, 
while the 2nd thing to search for for an inverse function is difficult for a tropism function count means in 
computational complexity at least, it applies a tropism function. 

[0032] The response indication verification section judges with what, on the other hand, compares the 
application result and this response indication of a tropism function, restricts when [ said ] in agreement, and 
has use rating. 

[0033] The operation in verification of use rating in the use rating verification equipment of claim 2 is as 
follows. 

[0034] In advance of verification of use rating, it is determined which right is verified whether the identification 
information of a right is inputted from the 2nd means of communications, and by calculating according to the 
regulation set to beforehand. 

[0035] A trial information count means generates a random number, combines the identification information of 
this right with this random number, and makes it trial information. 

[0036] This trial information is transmitted to the 3rd means of communications from the 2nd means of 
communications. The 2nd certification auxiliary information management means retrieves the certification 
auxiliary information corresponding to the identification information of the right contained in this trial 
information. 

[0037] A tropism function is applied while it is difficult in computational complexity at least to ask for an 

inverse function from the 3rd confidential information to which a confidential information maintenance means, 

on the other hand, holds a tropism function count means, and this right identification information. 

[0038] A response indication count means calculates the count result of the aforementioned one direction nature 

function, and this certification auxiliary information, and searches for certification information. 

[0039] On the other hand, to the random number of this certification information and this trial information, 

while the 3rd thing to search for for an inverse function is difficult for a tropism function count means in 

computational complexity at least, it applies a tropism function, and it makes it a response indication. 

[0040] The 3rd means of communications transmits a response indication to the 2nd means of communications. 

[0041] A tropism function is applied while it is difficult in computational complexity at least to ask for an 

inverse function from the 2nd confidential information to which a confidential information maintenance means, 

on the other hand, holds a tropism function count means, and this right identification information. 

[0042] A response indication count means calculates the count result of the aforementioned one direction nature 

function, and this certification auxiliary information, and searches for certification information. 

[0043] On the other hand, to the random number of this certification information and this trial information, 

while the 2nd thing to search for for an inverse function is difficult for a tropism function count means in 

computational complexity at least, it applies a tropism function. 

[0044] The response indication verification section judges with what, on the other hand, compares the 
application result and this response indication of a tropism function, restricts when [ said ] in agreement, and 
has use rating. 
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[0045] The operation in verification of use rating in the use rating verification equipment of claim 3 is as 
follows. 

[0046] This use rating verification equipment is equipped with the same means as the use rating verification 
equipment of claim 1 thru/or claim 2. 

[0047] In case use ****** is combined with certification auxiliary information, and a certification auxiliary 
information management means to manage the certification auxiliary information that it uses for count of a 
response indication manages it and retrieves certification auxiliary information from the identification 
information of a right, it also searches use limit description to coincidence. 

[0048] On the other hand, to the 3rd confidential information which this right identification information, this 
use limit description, and a confidential information maintenance means hold, while a tropism function count 
means is difficult to ask for an inverse function in computational complexity at least, it applies a tropism 
function. 

[0049] A response indication count means calculates the count result of the aforementioned one direction nature 
function, and this certification auxiliary information, and searches for certification information. On the other 
hand, to the random number of this certification information and this trial information, and this use limit 
description, while the 3rd thing to search for for an inverse function is difficult for a tropism function count 
means in computational complexity at least, it applies a tropism function. This use limit description and the 
value acquired here are combined, and it considers as a response indication. 

[0050] A response indication verification means judges as what restricts when the 1st value which, on the other 
hand, applied the tropism function count means, and information other than use limit description of this 
response indication are in agreement and use limit description fulfills predetermined conditions to use limit 
description of the random number of certification information and this trial information, and this response 
indication, and has use rating. (Whether predetermined conditions 1 being fulfilled and the approach of judging 
also have use limit description with a response indication count means.) 

The operation in verification of use rating in the use rating verification equipment of claim 4 is as follows. 
[0051] This use rating verification equipment is equipped with the same means as the use rating verification 
equipment of claim 1 thru/or claim 3. 

[0052] With a response indication verification means, when judged with a thing with use rating, information is 
decoded, using the value acquired from certification information or certification information by the decode 
means as a decode key of said decode means. 

[0053] The operation in verification of use rating in the use rating verification equipment of claim 5 is as 
follows. 

[0054] This use rating verification equipment is equipped with the same means as the use rating verification 
equipment of claim 1 thru/or claim 4. 

[0055] Transfer information is combined with certification information or certification auxiliary information, 
and a certification information maintenance means or the 1 st certification auxiliary information management 
means manages it. 

[0056] Trial information includes this transfer information further. 

[0057] Said transfer information is stored in a hysteresis management tool at the time of use rating verification. 
[0058] The operation in verification of use rating in the use rating verification equipment of claim 6 is as 
follows. 

[0059] The 1st trial information count means generates the 1st random number, combines with this random 
number at least the identification information of the right which a certification information maintenance means 
holds, and makes it trial information. 

[0060] This trial information is transmitted to the 3rd means of communications from the 2nd means of 
communications . 

[0061] The 2nd trial information count means generates the 2nd random number, and makes this the 2nd trial 
information. 

[0062] The 3rd means of communications transmits the 2nd trial information to the 2nd means of 
communications. The 1st response indication count means makes information which includes at least the 2nd 
value which inputted into the tropism function count means on the other hand, and was acquired here for the 
2nd trial information the 1 st response indication. 
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[0063] The 1st response indication is transmitted to the 3rd means of communications from the 2nd means of 
communications. A tropism function is applied while it is difficult in computational complexity at least to ask 
for an inverse function from the 3rd confidential information to which a confidential information maintenance 
means, on the other hand, holds a tropism function count means, and this right identification information. 
[0064] A certification auxiliary information management means retrieves the certification auxiliary information 
corresponding to the identification information of the right contained in this trial information. 
[0065] The 2nd response indication count means calculates the count result of the aforementioned one direction 
nature function, and this certification auxiliary information, and searches for certification information. 
Subsequently, the 1 st response indication compares the 3rd value acquired with the application of a tropism 
function count means on the other hand to information including the 2nd trial information and this certification 
information. 

[0066] If a value does not fill predetermined relation, a meaningless value is generated, it considers as the 2nd 
response indication and predetermined relation is filled, modification of the below-mentioned internal state and 
count of a response indication will be performed. 

[0067] An internal-state management tool searches the internal state corresponding to this right identification 
information, and changes this internal state according to the information transmitted by the 1 st trial information 
or 1st response indication. 

[0068] On the other hand, to the 3rd random number [ 1 st ] contained in this certification information and the 
1 st trial information, while a tropism function count means is difficult to ask for an inverse function in 
computational complexity at least, it applies a tropism function. 

[0069] The 2nd response indication count means makes this value the 2nd response indication. 
[0070] The 3rd means of communications transmits a response indication to the 2nd means of communications. 
[0071] On the other hand, to the random number of this certification information and this trial information, 
while the 2nd thing to search for for an inverse function is difficult for a tropism function count means in 
computational complexity at least, it applies a tropism function. 

[0072] The response indication verification section judges with what, on the other hand, compares the 
application result and this response indication of a tropism function, restricts when [ said ] in agreement, and 
has use rating. 

[0073] The operation in verification of use rating in the use rating verification equipment of claim 7 is as 
follows. 

[0074] In advance of verification of use rating, it is determined which right is verified whether the identification 
information of a right is inputted from the 2nd means of communications, and by calculating according to the 
regulation set to beforehand. 

[0075] A trial information count means generates a random number, combines the identification information of 
this right with this random number, and makes it trial information. 

[0076] This trial information is transmitted to the 3rd means of communications from the 2nd means of 
communications. The 1st certification auxiliary information management means retrieves the certification 
auxiliary information corresponding to the identification information of the right contained in this trial 
information. 

[0077] The 1st trial information count means generates the 1st random number, combines with this random 
number at least the identification information of the right which a certification information maintenance means 
holds, and makes it trial information. This trial information is transmitted to the 3rd means of communications 
from the 2nd means of communications. The 2nd trial information count means generates the 2nd random 
number, and makes this the 2nd trial information. 

[0078] The 3rd means of communications transmits the 2nd trial information to the 2nd means of 
communications. A tropism function is applied while it is difficult in computational complexity at least to ask 
for an inverse function from the 2nd confidential information to which a confidential information maintenance 
means, on the other hand, holds a tropism function count means, and this right identification information. 
[0079] The 1st response indication count means calculates the count result of the aforementioned one direction 
nature function, and this certification auxiliary information, and searches for certification information. 
[0080] The 1st response indication count means makes information which includes at least the 2nd value which 
inputted into the tropism function count means on the other hand, and was acquired here for this certification 
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information and the 2nd trial information the 1 st response indication. 

[0081] The 1st response indication is transmitted to the 3rd means of communications from the 2nd means of 
communications. A tropism function is applied while it is difficult in computational complexity at least to ask 
for an inverse function from the 3rd confidential information to which a confidential information maintenance 
means, on the other hand, holds a tropism function count means, and this right identification information. 
[0082] A certification auxiliary information management means retrieves the certification auxiliary information 
corresponding to the identification information of the right contained in this trial information. 
[0083] The 2nd response indication count means calculates the count result of the aforementioned one direction 
nature function, and this certification auxiliary information, and searches for certification information. 
Subsequently, the 1st response indication compares the 3rd value acquired with the application of a tropism 
function count means on the other hand to information including the 2nd trial information and this certification 
information. 

[0084] If a value does not fill predetermined relation, a meaningless value is generated, it considers as the 2nd 
response indication and predetermined relation is filled, modification of the below-mentioned internal state and 
count of a response indication will be performed. 

[0085] An internal-state management tool searches the internal state corresponding to this right identification 
information, and changes this internal state according to the information transmitted by the 1 st trial information 
or 1st response indication. 

[0086] On the other hand, to the 3rd random number [ 1 st ] contained in this certification information and the 
1st trial information, while a tropism function count means is difficult to ask for an inverse function in 
computational complexity at least, it applies a tropism function. 

[0087] The 2nd response indication count means makes this value the 2nd response indication. 
[0088] The 3rd means of communications transmits a response indication to the 2nd means of communications. 
[0089] On the other hand, to the random number of this certification information and this trial information, 
while the 2nd thing to search for for an inverse function is difficult for a tropism function count means in 
computational complexity at least, it applies a tropism function. 

[0090] The response indication verification section judges with what, on the other hand, compares the 
application result and this response indication of a tropism function, restricts when [ said ] in agreement, and 
has use rating. 

[0091] The operation in verification of use rating in the use rating verification equipment of claim 10 is as 
follows. 

[0092] This use rating verification equipment is equipped with the same means as the use rating verification 
equipment of claim 6 thru/or claim 9. 

[0093] Transfer information is combined with certification information or certification auxiliary information, 
and a certification information maintenance means or the 1 st certification auxiliary information management 
means manages it. 

[0094] The 1st trial information or 1st response indication includes this transfer information further. 

[0095] Said transfer information is stored in a hysteresis management tool at the time of use rating verification. 

[0096] 

[The mode of implementation of invention] Each use rating verification equipment of the example described 
below consists of three elements, a certification auxiliary information issue machine, a verification machine, 
and a certification machine. 

[0097] A certification auxiliary information issue machine publishes certification auxiliary information that it 
uses in process of verification of use rating. 

[0098] A verification machine and a certification machine perform dialogue certification, and verify the 
existence of use rating. In little [ far ] MD5, SHA, etc., on the other hand in the process of dialogue 
certification, computational complexity uses a tropism function compared with a public-key-encryption system. 
Although what, on the other hand, takes two or more arguments as a tropism function is used in the following 
examples, MD5 and SHA can be used by connecting the bit string of each argument. 

[0099] In addition, the correspondence relation between the example of the user rating verification equipment 
explained below and a claim is as follows, and explains each example with reference to corresponding drawing. 
In addition, drawing 1 - drawing 8 show the configuration of each example, and drawing 9 and drawing 10 
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show actuation. 
[0100] 
[Table 1] 

The 1st example Claim 1 The 2nd example of drawing 1 Claim 2 The 3rd example of drawing 2 Claim 3 The 
4th example of drawing 2 Claim 4 The 5th example of drawing 3 Claim 5 Drawing 4 , the 6th example of 
drawing 9 Claim 6 The 7th example of drawing 5 Claim 7 The 8th example of drawing 6 The 9th example of 
claim 8 drawing 6 The 10th example of claim 9 drawing 7 Claim 1 0 Drawing 8 , drawing 10 [0101] The 1st 
example is explained below the [1st example]. On the other hand, this example performs fundamental dialogue 
authentication using a tropism function. 

[0102] Drawing 1 shows the configuration of the 1st example and use rating verification equipment contains the 
certification auxiliary information issue machine 10, the verification machine 20, and the certification machine 
30 in this drawing. The certification auxiliary information issue machine 10 publishes certification auxiliary 
information in the certification vessel 20. The certification machine 30 uses this certification auxiliary 
information, and is a deed about dialogue authentication between the verification machines 20. If authentication 
is successful, the program execution section 40 will perform a program. 

[0103] The certification auxiliary information issue machine 10 is constituted including the 1st communications 
department 101, the confidential information Management Department 102, the certification Research and Data 
Processing Department 103, the 1st one direction nature count section 104, and the certification auxiliary 
information count section 105. 

[0104] The flow of processing of the certification auxiliary information issue machine 10 is shown in drawing 
1111 . 

[0105] This certification auxiliary information issue machine 10 publishes certification auxiliary information 
based on the demand from the certification machine 30. The 1st communications department 101 receives the 
identification information of certification equipment 30, and the information for identifying what kind of right 
is published from the certification machine 30 (SI 1 , SI 2 of drawing 1 1 ). The confidential information 
Management Department 102 searches the confidential information which certification equipment 30 holds 
from the information which identifies certification equipment 30 (SI 3). The certification Research and Data 
Processing Department 103 retrieves the certification information (K) corresponding to this right from the 
information which identifies a right. On the other hand, at least, to confidential information and right 
identification information, while the 1 st thing to search for for an inverse function is difficult for the tropism 
function count section 1 04 in computational complexity at least, it applies a tropism function. The certification 
auxiliary information count section 1 05 calculates certification auxiliary information based on certification 
information and the value acquired as a result of applying a tropism function on the other hand (SI 4). This 
certification auxiliary information is transmitted to the certification machine 30 from the 1st communications 
department 101 (SI 5). 

[0106] The verification machine 20 is constituted including the certification information attaching part 201, the 
trial information count section 202, the 2nd one direction nature function count section 203, the response 
indication verification machine 204, and the 2nd communications department 205. 

[0107] The verification machine 20 verifies the certification information to which trial information is returned 
by the certification machine 30 from delivery and the certification machine 30, and performs dialogue 
authentication between certification equipment. 

[0108] The flow of processing of the verification machine 20 is shown in drawing 12 . 

[0109] The certification information attaching part 201 holds the identification information of a right. The trial 
information count section 202 generates a random number, combines a random number and the identification 
information of the right which the certification information attaching part 201 holds, and is taken as trial 
information (S21 of drawing 12 ). This trial information is transmitted to the 3rd communications department 
305 of the certification machine 30 from the 2nd communications department 205 (S22). Moreover, the 2nd 
communications department 205 receives the response indication returned from the certification machine 30 
(S23). On the other hand, to the random number of certification information and this trial information, while the 
2nd thing to search for for an inverse function is difficult for the tropism function count section 203 in 
computational complexity at least, it applies a tropism function. The response indication verification machine 
204 is judged to be what, on the other hand, compares the application result of a tropism function with a 
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response indication, restricts when in agreement, and has use rating (S24, S25). 

[01 10] The certification machine 30 is constituted including the confidential information attaching part 301, the 
certification auxiliary Research and Data Processing Department 302, the response indication count section 303, 
the 3rd one direction nature function count section 304, and the 3rd communications department 305. 
[01 1 1] The certification machine 30 performs predetermined count to the trial information sent from the 
verification machine 20, generates a response indication, and returns it to the verification machine 20. 
[0112] The flow of processing of the certification machine 30 is shown in drawing 13 . 
[0113] Trial information is transmitted to the 3rd communications department 305 from the 2nd 
communications department 205 (S31). 

[0114] The confidential information attaching part 301 holds the confidential information of a proper in the 
certification vessel 30. The certification auxiliary Research and Data Processing Department 302 retrieves the 
certification auxiliary information corresponding to the identification information of the right contained in trial 
information (S32). Certification auxiliary information has come to hand from the certification auxiliary 
information issue machine 10 beforehand. A tropism function is applied while it is difficult in computational 
complexity at least to ask for an inverse function from the 3rd confidential information to which the confidential 
information attaching part 301 , on the other hand, holds the tropism function count section 304, and the right 
identification information contained in trial information (S33). On the other hand, the response indication count 
section 303 calculates the count result and certification auxiliary information on a tropism function, and 
searches for certification information. Furthermore, to the 3rd random number contained in certification 
information and trial information, while the tropism function count section 304 is difficult to ask for an inverse 
function in computational complexity at least, it applies a tropism function, and on the other hand, it is taken as 
a response indication. This response indication is sent to the 2nd communications department 205 of the 
verification machine 20 through the 3rd communications department 305 (S34, S35). 
[01 15] Hereafter, the protocol of authentication of the 1st example is explained to a detail. 
[0116] In the 1st example, the certification auxiliary information t is defined as follows. 
[0117] 

[Equation 1] t=K-f(d,n) 

It is the information which identifies the right to which certification information and f should verify K and 
confidential information and n should verify a tropism function and d on the other hand here. The trial 
information C sent to the certification machine 30 from the verification machine 20 uses r as a random number, 
and is [0118]. 
[Equation 2] It is C= (n, r). 

[0119] The certification machine 30 searches for a response indication R by the following count. 
[0120] 

[Equation 3] R=f(t+f(d,n),r) 

It is [0121] when the certification machine 30 holds the right certification auxiliary information t. 

[Equation 4] It is set to t+f(d, n) =K-f(d, n)+f(d, n) =K, the certification information K can be restored, and it is 

[0122]. 

[Equation 5] R=f(K,r) 
It becomes. 

[0123] the verification machine 20 — f (K, r) — asking — a response indication R — comparing — case both are 
equal — as long as ~ a certification machine judges with what has use rating. 

[0124] [Example which is the 2nd] The 2nd example is explained below. This example decides beforehand 
about those with two or more, and which right the right for authentication attests. Which right is attested inputs 
the identification information of a right, or it is calculated and determined under the regulation defined 
beforehand. On the other hand, the base of the authentication technique using a tropism function is the same as 
the 1 st example. 

[0125] Drawing 2 shows the configuration of the 2nd example and gave the corresponding sign to drawing 1 
and a corresponding part in this drawing. 

[0126] The certification auxiliary information issue machine 10 of this example publishes certification auxiliary 
information that answer the demand of the verification machine 10 and the certification machine 20, 
respectively, and it corresponds to it. 
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[0127] The verification machine 20 has the 1st confidential information attaching part 206 and the 1st 
certification auxiliary Research and Data Processing Department 207. The certification machine 30 has the 2nd 
confidential information attaching part 306 and the 2nd certification auxiliary Research and Data Processing 
Department 307. 

[0128] First, in advance of verification of use rating, the identification information of a right is inputted through 
the 2nd communications department 205, and it is determined which right is verified. This decision may be 
made by calculating according to the regulation defined in advance. 

[0129] The trial information count section 202 generates a random number, combines the identification 
information of a right with a random number, and is taken as trial information. This trial information is 
transmitted to the 3rd communications department 305 of the certification machine 30 from the 2nd 
communications department 205. 

[0130] The 2nd certification auxiliary Research and Data Processing Department 307 of the certification 
machine 30 retrieves the certification auxiliary information corresponding to the identification information of 
the right contained in trial information. And a tropism function is applied while it is difficult in computational 
complexity at least to ask for an inverse function from the 3rd confidential information to which the 2nd 
confidential information attaching part 306, on the other hand, holds the tropism function count section 304, and 
right identification information. Furthermore, on the other hand, the response indication count section 303 
calculates the count result and certification auxiliary information on a tropism function, and searches for 
certification information. On the other hand, further, to the random number of certification information and this 
trial information, while the 3rd thing to search for for an inverse function is difficult for the tropism function 
count section 304 in computational complexity at least, it applies a tropism function, and it is taken as a 
response indication. This response indication is sent to the verification machine 20 through the 3rd 
communications department 305 and 2nd communications department 205. 

[0131] A tropism function is applied while it is difficult in computational complexity at least to ask for an 
inverse function from the 2nd confidential information to which the 1 st confidential information attaching part 
206, on the other hand, holds the tropism function count section 203 and right identification information of the 
verification machine 20. And on the other hand, a predetermined operation is performed to the count result and 
certification auxiliary information on a tropism function, and certification information is searched for. On the 
other hand, further, to the random number of certification information and trial information, while the 2nd thing 
to search for for an inverse function is difficult for the tropism function count section 203 in computational 
complexity at least, it applies a tropism function. The response indication verification machine 204 is judged to 
be what, on the other hand, compares the application result of a tropism function with a response indication, 
restricts when in agreement, and has use rating. 

[0132] Below, the Challenge Handshake Authentication Protocol of the 2nd example is explained to a detail. 

[0133] In the 2nd example, the certification auxiliary information tv on a verification machine and the 

certification auxiliary information tp on a certification machine are defined as follows. 

[0134] 

[Equation 6] 

tv=K-f(dv,n) 

tp=K-f(dp,n) 

Here, K is information which identifies the right to which a tropism function and dv should verify certification 
information and f, and the confidential information of the certification machine 30 and n should, on the other 
hand, verify the confidential information of the verification machine 20, and dp. 

[0135] The trial information C sent to the certification machine 30 from the verification machine 20 uses r as a 
random number, and is [0136]. 
[Equation 7] C=(n,r) 
It comes out. 

[0137] The certification machine 30 searches for a response indication R by the following count. 
[0138] 

[Equation 8] R=f(tp+f(dp,n),r) 

It is [0139] when the certification machine 30 holds the right certification auxiliary information tp. 

[Equation 9] It is set to tp+f(dp, n) =K-f(dp, n)+f(dp, n) =K, the certification information K can be restored, and 
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it is [0140]. 

[Equation 10] R=f(K,r) 
It becomes. 

[0141] The verification machine 20 calculates tv+f (dv, n), and asks for K. subsequently, f (K, r) — asking — R - 
- comparing — case both are equal — as long as — a certification machine judges with what has use rating. 
[0142] [Example which is the 3rd] The 3rd example is explained below. This example introduces a use limit 
further in the 2nd example. 

[0143] The configuration of the 3rd example itself is the same as that of the 2nd example, and it is as being 
shown in drawing 2 . 

[0144] Hereafter, the Challenge Handshake Authentication Protocol of the 3rd example is explained. 
[0145] In the 3rd example, the certification auxiliary information tv on the verification machine 20 and the 
certification auxiliary information tp on the certification machine 30 are defined as follows. 
[0146] 

[Equation 11] 

tv=K-f(dv,n) 

tp=K-f(dp,n,L) 

The information and L from which K discriminates the right to which a tropism function and dv should verify 
certification information and f, and the confidential information of the verification machine 20 and dp should, 
on the other hand, verify the confidential information of the certification machine 30 and n here are use limit 
description. The use limit description L is a bit string showing the expiration date. 

[0147] The trial information C sent to the certification machine 30 from the verification machine 20 uses r as a 
random number, and is [0148]. 
[Equation 12] C=(n,r) 
It comes out. 

[0149] The certification machine 30 searches for a response indication R by the following count. 
[0150] 

[Equation 13] 
R=(L 5 f(tp+f(dp,n,L),r,L)) 

It is [0151] when the certification machine 30 holds the right certification auxiliary information tp. 
[Equation 14] It is set to tp+f(dp, n, L) =K-f(dp, n, L)+f(dp, n 3 L) =K, the certification information K can be 
restored, and it is [0152]. 
[Equation 15] R=(L,f(K,r,L)) 
It becomes. 

[0153] The verification machine 20 calculates tv+f (dv, n), and asks for K. Subsequently, it restricts, when ** 
[ both ] and the use limit description L fulfill a service condition in quest of f (K, r) as compared with R, and it 
judges with that in which the certification machine 30 has use rating. 

[0154] Although it shall judge whether the use limit description L fulfills a service condition with the 
verification vessel 20 here, the certification machine 30 may be made to perform. It is not necessary to include 
the use limit description L in a response indication at this time. 

[0155] [Example which is the 4th] The 4th example is explained below. This example decodes the information 
enciphered considering the value drawn from the certification information K or certification information as a 
key. 

[0156] Drawing 3 shows the configuration of the 4th example and gave the corresponding sign to the 
corresponding part with drawing 2 in this drawing. In this example, the decode section 208 is added to the 
verification machine 20. 

[0157] The information and the verification procedure which are treated in the 4th example are the same as the 
3rd example. When the decode section 208 of the verification machine 20 is judged as the certification machine 
30 having use rating, the information which used the certification information K and K and was enciphered, 
using a computable value as a key is decoded. 

[0158] [Example which is the 5th] The 5th example is explained below. This example enables it to manage use 
hysteresis. 

[0159] Drawing 4 shows the configuration of the 5th example and gave the corresponding sign to drawing 3 and 
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a corresponding part in this drawing. In drawing 4 , the hysteresis Management Department 308 is established 
in the certification machine 30. 

[0160] Hereafter, the Challenge Handshake Authentication Protocol of the 5th example is explained. 
[0161] This authentication procedure is shown also in drawing 9 . Since each actuation of the 4th of the 1st - an 
example is included in the 5th example, it can also understand actuation of the 4th of the 1st - an example from 
drawing 9 . 

[0162] Hereafter, the Challenge Handshake Authentication Protocol of the 5th example is explained to a detail. 
[0163] In the 5th example, the certification auxiliary information tv on the verification machine 20 and the 
certification auxiliary information tp on the certification machine 30 are defined as follows. 
[0164] 

[Equation 16] 

tv=K-f(dv,n) 

tp=K-f(dp,n,L) 

The information and L from which K discriminates the right to which a tropism function and dv should verify 
certification information and f, and the confidential information of the verification machine 20 and dp should, 
on the other hand, verify the confidential information of the certification machine 30 and n here are use limit 
description. The use limit description L is a bit string showing the expiration date. 
[0165] The verification machine 20 calculates tv+f (dv, n), and asks for K. 

[0166] The trial information C sent to the certification machine 30 from the verification machine 20 uses r as a 
random number, and is [0167]. 
[Equation 17] C=(n,I,r,s) 

It comes out. Here, the information and s which transmit I to the certification machine 30 from the verification 
machine 20 are [0168], 
[Equation 18] s=f(K,I,r) 

It is the becoming value. The certification machine 30 asks for K 1 by the following count. 
[0169] 

[Equation 19] K'=tp+f(dp,n,L) 

Subsequently, f (K', I, r) is calculated and it compares with s. It restricts, when s is in agreement, and the 

information containing I is stored in the hysteresis attaching part 308. 

[0170] The certification machine 30 searches for a response indication R further. 

[0171] 

[Equation 20] 
R=(L,f(tp+f(dp,n,L),r,L)) 

It is [0172] when the certification machine 30 holds the right certification auxiliary information tp. 
[Equation 21] It is set to tp+f(dp, n, L) =K-f(dp, n, L)+f(dp, n, L) =K, the certification information K can be 
restored, and it is [0173]. 
[Equation 22] R=(L,f(K,r,L)) 
It becomes. 

[0174] Subsequently, it restricts, when ** [ both ] and L fulfill a service condition in quest of f (K, r) as 
compared with R, and it judges with that in which a certification machine has use rating. 
[0175] Here, although it shall judge whether the use limit description L fulfills a service condition with the 
verification vessel 20, the certification machine 30 may be made to perform. 

[0176] [Example which is the 6th] The 6th example is explained below. The 6th example performs mutual 
recognition and enables it to change the internal state of the certification machine 30. 

[0177] Drawing 6 shows the configuration of the 6th example and gave the corresponding sign to drawing 1 and 
a corresponding part in this drawing. In drawin g 6 , the 1st trial information count section 209, the 1st response 
indication count section 210, and the 1st response indication verification machine 21 1 were formed in the 
verification machine 20, and the 2nd trial information count section 309, the 2nd response indication count 
section 310, the 2nd response indication verification machine 311, and the internal-state Management 
Department 312 are established in the certification machine 30. 

[0178] In this example, in process of dialogue authentication, each attests, the verification machine 20 performs 
decode etc. and the certification machine 30 changes the internal state corresponding to decode etc. 
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[0179] The flow of processing of the verification machine 20 of this example and the certification machine 30 is 
shown in drawing 14 and drawing 15 , respectively. 

[0180] The 1st trial information count section 209 of the verification machine 20 generates the 1st random 
number, combines at least the 1 st random number and the identification information of the right which the 
certification information attaching part 201 holds, and is taken as trial information (S41 of drawing 14 ). This 
trial information is transmitted to the 3rd communications department 305 of the certification machine 30 from 
the 2nd communications department 205 (S42, S51 of drawing 15 ). 

[0181] On the other hand, the 2nd trial information count section 309 generates the 2nd random number, makes 
this the 2nd trial information, and transmits to the verification machine 20 (the 2nd communications department 
205) through the 3rd communications department 305 (S52, S43). 

[0182] The 1st response indication count section 210 of the verification machine 20 generates the 1st response 
indication so that the information itself to deliver at least the 2nd trial information and the information 
transmitted to the certification machine 30 from the verification machine 20 the 2nd value which inputted into 
the tropism function count section 203 on the other hand, and was acquired here may be included. This 1st 
response indication is transmitted to the 3rd communications department 305 of the certification machine 30 
from the 2nd communications department 205 (S44, S53). 

[01 83] A tropism function is applied while it is difficult in computational complexity at least to ask for an 
inverse function from the 3rd confidential information to which the confidential information attaching part 301, 
on the other hand, holds the tropism function count section 304 and right identification information of the 
certification machine 30. 

[0184] The certification auxiliary Research and Data Processing Department 302 retrieves the certification 
auxiliary information corresponding to the identification information of the right contained in trial information 
(S54). 

[01 85] On the other hand, the 2nd response indication count section 310 calculates the count result and 
certification auxiliary information on a tropism function, and searches for certification information. 
Subsequently, the 3rd value which, on the other hand, applied the tropism function count section 304, and was 
acquired as a result, and the 1 st response indication (that part) are collated to the 2nd trial information and 
information including certification information (S55, S56). If a value does not fill predetermined relation, a 
meaningless value is generated, it considers as the 2nd response indication and predetermined relation is filled, 
modification of the below-mentioned internal state and count of a response indication will be performed. 
[0186] The internal-state Management Department 312 searches the internal state corresponding to right 
identification information, and changes an internal state according to the information transmitted by the 1 st trial 
information or 1 st response indication. 

[0187] On the other hand, to the 3rd random number [ 1st ] contained in certification information and the 1st 
trial information, while the tropism function count section 304 is difficult to ask for an inverse function in 
computational complexity at least, it applies a tropism function, and the 2nd response indication count section 
311 makes this value the 2nd response indication. The 3rd communications department 305 transmits the 2nd 
response indication to the communications department 205 of the 2nd verification machine 20 (S57, S58, S45). 
[0188] On the other hand, to the random number of certification information and trial information, while the 
2nd [ of the verification machine 20 ] thing to search for for an inverse function is difficult for the tropism 
function count section 203 in computational complexity at least, it applies a tropism function. The 1 st response 
indication verification machine 21 1 is judged to be what, on the other hand, compares the application result of a 
tropism function with the 2nd response indication, restricts when in agreement, and has use rating (S46, S47). 
[0189] Hereafter, the protocol of authentication of the 6th example is explained. 
[0190] In the 6th example, the certification auxiliary information t is defined as follows. 
[0191] 

[Equation 23] t=K-f(d,n) 

It is the information which identifies the right to which certification information and f should verify K and 

confidential information and n should verify a tropism function and d on the other hand here. 

[0192] The 1st trial information CI sent to the certification machine 30 from the verification machine 20 uses rl 

as a random number, and is [0193]. 

[Equation 24] Cl=(n,rl) 
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It comes out. 

[0194] The certification machine 30 sends the 2nd trial information C2 to the verification machine 20. 
[0195] 

[Equation 25] C2=r2 — here, r2 is a random number. 

[0196] The verification machine 20 sends the 1st response indication Rl to the certification machine 30. 
[0197] 

[Equation 26] Rl=(m,f(K,r2,m)) 

Here, m is information transmitted to the certification machine 30 from the verification machine 20. m is a 
frame charged at every use. 

[0198] The certification machine 30 asks for K' by the following count. 
[0199] 

[Equation 27] K ! =tp+f(dp,n) 

The certification auxiliary information tp of K' corresponds with the certification information K at a right case. 
[0200] The certification machine 30 calculates f (K\ r2, m), and compares it with the 2nd term of Rl. When 
both are equal, according to the information m transmitted from the verification machine 20, the internal state 
corresponding to the right which should be verified is changed. For example, if it is the frame charged whenever 
m is use, a prepaid frame will be reduced a ****ed part. 

[0201] Subsequently, the certification machine 30 searches for the 2nd response indication R2. 
[0202] 

[Equation 28] R2=f(K',rl) 

When the certification machine holds the right certification auxiliary information tp, K ! is in agreement with the 
certification information K, and it is [0203]. 
[Equation 29] R2=f(K,r) 
It becomes. 

[0204] the verification machine 20 — f (K, r) ~ asking — R2 — comparing — case both are equal ~ as long as — 
the certification machine 30 judges with what has use rating. 

[0205] [Example which is the 7th] The 7th example is explained below. This example decides beforehand about 
those with two or more, and which right the right for authentication attests. Which right is attested inputs the 
identification information of a right, or it is calculated and determined under the regulation defined beforehand. 
Other configurations are the same as that of the 6th example. 

[0206] In addition to the configuration of the 6th example ( drawing 5 ), the verification machine 20 of this 
example has formed the 1st confidential information attaching part 206 and the 1st certification auxiliary 
Research and Data Processing Department 207. Moreover, the certification machine 30 has the 2nd confidential 
information attaching part 306 (confidential information attaching part 301 of drawing 5 ), and the 2nd 
certification auxiliary Research and Data Processing Department 307 (confidential information attaching part 
302 of drawing 5 ). In drawing 6 , the corresponding sign was given to drawing 5 and a corresponding part. 
[0207] The certification auxiliary information issue machine 1 0 of this example publishes certification auxiliary 
information that answer the demand of the verification machine 10 and the certification machine 20, 
respectively, and it corresponds to it. 

[0208] In advance of verification of use rating, it is determined which right is verified whether the identification 
information of a right is inputted from the 2nd communications department 205, and by calculating according to 
the regulation set to beforehand. 

[0209] The 1 st certification auxiliary Research and Data Processing Department 207 of the verification machine 
20 retrieves the certification auxiliary information corresponding to the identification information of the right 
contained in trial information. 

[0210] The 1st trial information count section 209 generates the 1st random number, combines a random 
number and the identification information of a right at least, and is taken as trial information. This trial 
information is transmitted to the 3rd communications department 305 of the certification machine 30 from the 
2nd communications department 205. 

[021 1] The 2nd trial information count section 309 of the certification machine 30 generates the 2nd random 
number, and makes this the 2nd trial information. The 3rd communications department 305 transmits the 2nd 
trial information to the 2nd communications department 205 of the verification machine 20. 
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[0212] A tropism function is applied while it is difficult in computational complexity at least to ask for an 
inverse function from the 2nd confidential information to which the confidential information attaching part 206, 
on the other hand, holds the tropism function count section 203 and right identification information of the 
verification machine 20. 

[0213] On the other hand, the 1st response indication count section 210 calculates the count result and 
certification auxiliary information on a tropism function, and searches for certification information. The 1st 
response indication count section 210 generates the 1st response indication like with the information itself 
which delivered at least the 2nd trial information and the information transmitted to the certification machine 30 
from the verification machine 20 the 2nd value which inputted into the tropism function count section on the 
other hand, and was acquired here. This 1st response indication is transmitted to the 3rd communications 
department 305 from the 2nd communications department 205. 

[0214] A tropism function is applied while it is difficult in computational complexity at least to ask for an 
inverse function from the 3rd confidential information to which the 2nd confidential information attaching part 
206, on the other hand, holds the tropism function count section 304 and right identification information of the 
certification machine 30. 

[0215] The 2nd certification auxiliary Research and Data Processing Department 307 retrieves the certification 
auxiliary information corresponding to the identification information of the right contained in trial information. 
[0216] On the other hand, the 2nd response indication count section 310 calculates the count result and 
certification auxiliary information on a tropism function, and searches for certification information. 
Subsequently, the 1st response indication collates the 3rd value acquired with the application of the tropism 
function count section on the other hand, and the 1 st response indication (the part) to information including the 
2nd trial information and certification information. If a value does not fill predetermined relation, a meaningless 
value is generated, it considers as the 2nd response indication and predetermined relation is filled, modification 
of the below-mentioned internal state and count of a response indication will be performed. 
[0217] The internal-state Management Department 312 searches the internal state corresponding to right 
identification information, and changes an internal state according to the information transmitted by the 1 st trial 
information or 1 st response indication. 

[0218] On the other hand, to the 3rd random number [ 1st ] contained in certification information and the 1st 
trial information, while the tropism function count section 304 is difficult to ask for an inverse function in 
computational complexity at least, it applies a tropism function, and the 2nd response indication count section 
310 makes this value the 2nd response indication. The 3rd communications department 305 transmits a 
response indication to the 2nd communications department 205. 

[0219] On the other hand, to the random number of certification information and trial information, while the 
2nd [ of the verification machine 20 ] thing to search for for an inverse function is difficult for the tropism 
function count section 203 in computational complexity at least, it applies a tropism function. 
[0220] The 1st response indication verification machine 21 1 is judged to be what, on the other hand, compares 
the application result of a tropism function with the 2nd response indication, restricts when in agreement, and 
has use rating. 

[0221] Hereafter, the Challenge Handshake Authentication Protocol of the 7th example is explained. 
[0222] In the 7th example, the certification auxiliary information tv on a verification machine and the 
certification auxiliary information tp on a certification machine are defined as follows. 
[0223] 

[Equation 30] 

tv=K-f(dv,n) 

tp=K-f(dp,n) 

Here, K is information which identifies the right to which a tropism function and dv should verify certification 
information and f, and the confidential information of a certification machine and n should, on the other hand, 
verify the confidential information of a verification machine, and dp. 

[0224] The 1st trial information CI sent to the certification machine 30 from the verification machine 20 uses rl 
as a random number, and is [0225]. 
[Equation 3 1 ] C 1 =(n,r 1 ) 
It comes out. 
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[0226] 30 certification machine sends the 2nd trial information C2 to the verification machine 20. 
[0227] 

[Equation 32] C2=r2 — here, r2 is a random number. 

[0228] The verification machine 20 calculates tv+f (dv, n), and asks for K. Subsequently, the 1 st response 

indication Rl is searched for by the following count. 

[0229] 

[Equation 33] Rl=(m,f(K,r2,m)) 

Here, m is information transmitted to the certification machine 30 from the verification machine 20. 

[0230] The certification machine 30 asks for K' by the following count. 

[0231] 

[Equation 34] K'=tp+f(dp,n) 

The certification auxiliary information tp of K' corresponds with the certification information K at a right case. 
[0232] The certification machine 30 calculates f (K 1 , r2, m), and compares it with the 2nd term of Rl. When 
both are equal, according to the information m transmitted from the verification machine 20, the internal state 
corresponding to the right which should be verified is changed. For example, if it is the frame charged whenever 
m is use, a prepaid frame will be reduced a ****ed part. 

[0233] Subsequently, the certification machine 30 searches for the 2nd response indication R2. 
[0234] 

[Equation 35] R2=f(K',rl) 

When the certification machine holds the right certification auxiliary information tp, K 1 is in agreement with the 
certification information K, and it is [0235]. 
[Equation 36] R2=f(K,r) 
It becomes. 

[0236] the verification machine 20 — f (K, r) — asking — R2 ~ comparing — case both are equal — as long as ~ 
the certification machine 30 judges with what has use rating. 

[Example which is the 8th] The 8th example is explained below. The 8th example introduces use limit 
information in the 7th example. The configuration of the 8th example is constituted as shown in drawin g 6 like 
the 7th example. 

[0237] Hereafter, the Challenge Handshake Authentication Protocol of the 8th example is explained. 
[0238] In the 8th example, the certification auxiliary information tv on the verification machine 20 and the 
certification auxiliary information tp on the certification machine 30 are defined as follows. 
[0239] 

[Equation 37] 

tv=K-f(dv,n) 

tp=K-f(dp,n,L) 

The information and L from which K discriminates the right to which a tropism function and dv should verify 
certification information and f, and the confidential information of the verification machine 20 and dp should, 
on the other hand, verify the confidential information of the certification machine 30 and n here are use limit 
description. 

[0240] The 1st trial information CI sent to the certification machine 30 from the verification machine 20 uses rl 
as a random number, and is [0241]. 
[Equation 38] Cl=(n,rl) 
It comes out. 

[0242] The 2nd trial information C2 sent to the verification machine 20 from the certification machine 30 uses 
r2 as a random number, and is [0243]. 
[Equation 39] It is C2=r2. 

[0244] The verification machine 20 calculates tv+f (dv, n), and asks for K. Subsequently, the 1st response 

indication Rl is searched for by the following count. 

[0245] 

[Equation 40] Rl=(m,f(K,r2,m)) 

Here, m is information transmitted to the certification machine 30 from the verification machine 20. 
[0246] The certification machine 30 asks for K' by the following count. 
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[0247] 

[Equation 41] K'=tp+f(dp,n) 

The certification auxiliary information tp of K ! corresponds with the certification information K at a right case. 
[0248] A certification machine calculates f (K ! , r2, m), and compares it with the 2nd term of Rl. When both are 
equal, according to the information m transmitted from the verification machine 20, the internal state 
corresponding to the right which should be verified is changed. Subsequently, the certification machine 30 
searches for the 2nd response indication R2. 
[0249] 

[Equation 42] R2=(L,f(tp+f(dp,n,L),r,L)) 

When the certification machine 30 holds the right certification auxiliary information tp, K' is in agreement with 
the certification information K, and it is [0250]. 
[Equation 43] R2=(L,f(K,r,L)) 
It becomes. 

[0251] The verification machine 20 calculates tv+f (dv, n), and asks for K. Subsequently, it restricts, when ** 
[ both ] and the use limit description L fulfill a service condition in quest of f (K, r) as compared with the 2nd 
term of R2, and it judges with that in which the certification machine 30 has use rating. 
[0252] Although it shall judge whether the use limit description L fulfills a service condition with the 
verification vessel 20 here, the certification machine 30 may be made to perform. 

[0253] The 9th example of [the 9th example] forms the decode section 208 in the verification machine 20 in the 
8th example. Drawing 7 shows the configuration of the 9th example and gave the corresponding sign to the 
corresponding part with drawing 6 in this drawing. 

[0254] The information and the verification procedure which are treated in the 9th example are the same as the 
8th example. When it judges with a certification machine having use rating, the decode section 208 decodes the 
information enciphered using the certification information K and K, using a computable value as a key. 
[0255] [Example which is the 10th] The 10th example is explained below. This example enables it to manage 
use hysteresis. 

[0256] Drawing 8 shows the configuration of the 10th example and gave the corresponding sign to drawing 7 
and a corresponding part in this drawing. In drawing 8 , the hysteresis Management Department 308 is 
established in the certification machine 30. 

[0257] Hereafter, the Challenge Handshake Authentication Protocol of the 10th example is explained. 
[0258] This authentication procedure is shown also in drawing 10 . Since each actuation of the 9th of the 5th - 
an example is included in the 10th example, it can also understand actuation of the 9th of the 5th - an example 
from drawing 1 0 . 

[0259] In the 1 0th example, the certification auxiliary information tvona verification machine and the 

certification auxiliary information tp on a certification machine are defined as follows. 

[0260] 

[Equation 44] 

tv=K-f(dv,n) 

tp=K-f(dp,n,L) 

The information and L from which K discriminates the right to which a tropism function and dv should verify 
certification information and f, and the confidential information of the verification machine 20 and dp should, 
on the other hand, verify the confidential information of the certification machine 30 and n here are use limit 
description. The use limit description L is a bit string showing the expiration date. 
[0261] The verification machine 20 calculates tv+f (dv, n), and asks for K. 

[0262] The 1st trial information CI sent to the certification machine 30 from the verification machine 20 uses rl 
as a random number, and is [0263]. 
[Equation 45] Cl=(n,I,r,s) 

It comes out. Here, the information and s which transmit I to a certification machine from a verification 
machine are [0264]. 
[Equation 46] s=f(K,I,r) 
It is the becoming value. 

[0265] The certification machine 30 asks for K ! by the following count. 
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[0266] 

[Equation 47] K'=tp+ f(dp,n,L) 

Subsequently, the certification machine 30 calculates f (K 1 , 1, r), and compares it with s. It restricts, when s is in 
agreement, and the information containing I is stored in the hysteresis attaching part 308. 
[0267] The certification machine 30 sends the 2nd trial information C2 to a verification machine. 
[0268] 

[Equation 48] C2=r2 — here, r2 is a random number. 

[0269] The verification machine 20 calculates tv+f (dv, n), and asks for K. Subsequently, the 1st response 
indication Rl is searched for by the following count. 
[Equation 49] Rl=(m,f(K,r2,m)) 

Here, m is information transmitted to a certification machine from a verification machine. A certification 

machine asks for K f by the following count. 

[0270] 

[Equation 50] K'=tp+f(dp,n) 

The certification auxiliary information tp of K ! corresponds with the certification information K at a right case. 
[0271] The certification machine 30 calculates f (K\ r2, m), and compares it with the 2nd term of Rl. When 
both are equal, according to the information m transmitted from the verification machine 20, the internal state 
corresponding to the right which should be verified is changed. 

[0272] Subsequently, the certification machine 30 searches for the 2nd response indication R2. 
[0273] 

[Equation 51] R2=(L,f(tp+f(dp,n,L),r,L)) 

It is [0274] when the certification machine 30 holds the right certification auxiliary information tp. 
[Equation 52] It is set to tp+f(dp, n, L) =K-f(dp, n, L)+f(dp, n, L) =K, the certification information K can be 
restored, and it is [0275]. 
[Equation 53] R2=(L,f(K,r,L)) 
It becomes. 

[0276] The verification machine 20 is compared with R2 in quest of f (K, r). It restricts, when ** [ both ] and L 
fulfill a service condition, and it judges with that in which the certification machine 30 has use rating. 
[0277] Here, although it shall judge whether the use limit description L fulfills a service condition with the 
verification vessel 20, the certification machine 30 may be made to perform. 

[0278] In the above example, although MD5 and SHA were mentioned as an example as a tropism function on 
the other hand, common use cryptosystems, such as DES, may be used instead. 

[0279] Although information used for authentication of a verification machine and the certification of a 
certification machine having a right was made into the same certification information in the above this example, 
it supposes that certification information separate about each is used, and you may make it treat suitable 
information in a certification information attaching part, a confidential information attaching part, and the 
certification auxiliary Research and Data Processing Department. 

[0280] Although especially the thing for which hardware with tamper-proof nature is used is not made into the 
premise in the above example, unjust risk can be reduced a certification information attaching part, a 
confidential information attaching part, and by on the other hand protecting the tropism function count section 
by hardware with tamper-proof nature. 

[0281] Although the use rating verification equipment of this invention was used in the above example for 
control of the propriety of activation of software, it is possible to use as a ticket (ticket) usually used with the 
various services currently provided with certification auxiliary information in the real world. 
[0282] Although the result of on the other hand having subtracted the ******** value for tropism functions 
from certification information was used as certification auxiliary information in the above example, the 
exclusive OR for every bit etc. should just be the result of applying the combination of the operation which can 
be counted backward to certification information. 

[0283] [Example of application] Below, the concrete example of application of an example is explained. In 
addition, below, the thing of certification auxiliary information is called a ticket. 
[0284] First, the case where it uses for the access control of software is explained. 

[0285] Drawing 16 shows the example which performs the access control of software on a network. In addition, 
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in drawing 16 , the corresponding sign was given to the corresponding part with drawing 1 . In drawing 16 , the 
user calculating machine 1000 and the ticket issue calculating machine 2000 are connected in the network 3000. 
WAN or LAN is sufficient as a network 3000. The predetermined operating system 1002 is installed in 
hardware 1001, and, as for the user calculating machine 1000, an application program 1003 and the certification 
program 30 operate on this operating system 1002. The verification program 20 is embedded at the application 
program 1003. An application program 1003 may be offered with the gestalt of a record medium, is offered on- 
line, and its potato is good. As for a part of certification program 30, it is desirable to perform on the tamper- 
proof equipment mounted in the user computer 1 000. 

[0286] The ticket issue calculating machine 2000 also has hardware 2001 and an operating system 2002, and 
the ticket issue server 30 operates. 

[0287] A user demands issue of the auxiliary information for certification (ticket) of a ticket issue server to use 
application 1003. This demand is accompanied by a user's identification number and the identification number 
of application, the ticket issue server 1 0 — a user's identification number and the identification number of 
application ~ being based ~ respectively ~ a user's confidential information and the law of a public key — a 
number and certification information are taken out. And certification auxiliary information is calculated and the 
certification program 20 of the use computer 1000 is passed. 

[0288] Henceforth, the certification program 30 and the verification program 20 attest by exchanging the trial 
information C and a response indication R, and an application program will become available if authentication 
is successful. 

[0289] It is possible to carry out the code of a part of software [ at least ] by the cryptographic key as the 
technique of protection of software (application 1003). The cryptographic key of software is set to K and a 
random number is set to r. For insurance, it is desirable not to contain the key K itself in software. What is 
necessary is just to inspect whether when not contained in software, the key K itself decodes a part of 
enciphered software, and it fulfills predetermined conditions. 

[0290] The example which uses an example for control of ticket gate equipment next is explained. Drawing 17 
shows the ticket gate system by which this example was applied, and the program which realizes the 
certification machine 30 is installed in IC card 4000 in this drawing. The ticket issue terminal 5000 has a 
removable IC card, communicates with the ticket issue server 30, and writes certification auxiliary information 
(ticket) in IC card 4000. A user shows the entrance gate 6000 IC card 4000, when coming in (inserting in a 
slot), and he attests in the meantime by the verification equipment 10 of the entrance gate 6000 and the 
certification equipment 20 of IC card 4000' communicating mutually. If authentication is successful, it will 
enable a user to pass through the entrance gate 6000. 
[0291] 

[Effect of the Invention] Generally as compared with a public-key-encryption system, the hash is thousands 
times more nearly high-speed. BruceSchneier, Applied When the MD5 algorithm which calculates a 128-bit 
digest is performed by the processor made from U.S. Intel (33MHz 486SX, trademark) according to 
Cryptography (SecondEdition), Wiley, and 1996, 174MB/s can encode, as mentioned above — according to this 
writing — law ~ as for the time amount which performs the RSA cryptosystem of number 1024 bit and, and 8 
bits of public keys by SPARC2, as for verification, the signature has taken 0.08 seconds for 0.97 seconds. 
Therefore, it is possible by changing an authentication device into a hash from a public-key-encryption system 
to reduce computational complexity to 1/thousands, and to raise execution speed. 

[0292] As mentioned above, according to the use rating verification equipment of this invention, the access 
control of software can be performed efficiently. Furthermore, by using certification auxiliary information for a 
verification machine side, the hardware which can perform an arcade game and various services can be 
restricted, and the collection and the franchise system of the charge of a license which receive hard can be 
realized. 



[Translation done.] 
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* NOTICES * 

JPO and NCI PI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original precisely. 

2 **** s hows the word which can not be translated. 
3. In the drawings, any words are not translated. 
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[Procedure revision] 

[Filing Date] October 17, Heisei 14 (2002. 10.17) 

[Procedure amendment 1] 

[Document to be Amended] Specification 

[Item(s) to be Amended] Claim 

[Method of Amendment] Modification 

[Proposed Amendment] 

[Claim(s)] 

[Claim 1] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section, 
Said certification auxiliary information issue section, 

A certification information management means to manage the certification information used in the case of 
authentication of use rating, 

The confidential information management tool which manages secret information, 

For asking for an inverse function, on the other hand, the 1st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means to the confidential 
information which said confidential information management tool manages at least, 
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The confidential information which said confidential information management tool manages, and said 1st 
certification auxiliary information count means to calculate certification auxiliary information based on the 
count result of a tropism function count means on the other hand, 

It has the 1st means of communications which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification section, 

A certification information maintenance means to hold certification information, 
A trial information count means to calculate trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 
The certification information which said certification information maintenance means holds, and a response 
indication verification means to inspect whether the 2nd [ said ] result on which the tropism count means was 
made to act on the other hand, and a response indication are equal to the value acquired based on a part or all of 
trial information, 

It has the 2nd means of communications which transmits and receives information in process of authentication 

of use rating, 

Said certification section, 

A confidential information maintenance means to hold secret information, 

A certification auxiliary information management means to manage the certification auxiliary information that 
it uses for count of a response indication, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 

It is said 3rd response indication count means to calculate a response indication by on the other hand making a 
tropism function count means act, to the value acquired based on a part or all of trial information, the 
confidential information which said confidential information maintenance means holds, and the certification 
auxiliary information which said certification auxiliary information management means manages, 
Use rating verification equipment characterized by having the 3rd means of communications which transmits 
and receives information in process of the process of authentication of use rating, and certification auxiliary 
information count. 

[Claim 2] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section, 
Said certification auxiliary information issue section, 

A certification information management means to manage the certification information used in the case of 
authentication of use rating, 

The confidential information management tool which manages secret information, 

For asking for an inverse function, on the other hand, the 1 st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means to the confidential 
information which said confidential information management tool manages at least, 

The confidential information which said confidential information management tool manages, and said 1st 
certification auxiliary information count means to calculate certification auxiliary information based on the 
count result of a tropism function count means on the other hand, 

It has the 1st means of communications which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification section, 

The 1 st confidential information maintenance means holding secret information, 

The 1 st certification auxiliary information management means which manages certification auxiliary 

information, 

A trial information count means to calculate trial information, 

On the other hand, the 2nd to which asking for an inverse function applies a directivity function difficult in 
computational complexity at least is a tropism function count means, 

The confidential information which said 1st confidential information maintenance means holds, and a response 
indication verification means to inspect whether the 2nd [ said ] result on which the tropism count means was 
made to act on the other hand, and a response indication are equal to the value acquired based on a part or all of 
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trial information, 

It has the 2nd means of communications which transmits and receives information in process of authentication 

of use rating, 

Said certification section, 

The 2nd confidential information maintenance means holding secret information, 

The 2nd certification auxiliary information management means which manages the certification auxiliary 
information that it uses for count of a response indication, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 

It is said 3rd response indication count means to calculate a response indication by on the other hand making a 
tropism function count means act, to the value acquired based on a part or all of trial information, the 
confidential information which said 2nd confidential information maintenance means holds, and the 
certification auxiliary information which said 2nd certification auxiliary information management means 
manages, 

Use rating verification equipment characterized by having the 3rd means of communications which transmits 
and receives information in process of the process of authentication of use rating, and certification auxiliary 
information count. 

[Claim 3] It is use rating verification equipment of claim 1 thru/or claim 2, 

Said certification information management means is combined with certification information, and manages the 
use limit description which is the information which shows use conditions, 

Said certification auxiliary information management means is combined with certification auxiliary 
information, and manages use limit description, 

Use rating verification equipment characterized by including use limit description in count of the response 
indication generated in the certification auxiliary information that it uses in said certification section, and said 
certification section. 

[Claim 4] Use rating verification equipment characterized by decoding information, using the value acquired 
from certification information or certification information as a decode key of said decode means when it judges 
with it being use rating verification equipment of claim 1 thru/or claim 3, and having a decode means, and there 
being use rating. 

[Claim 5] It is use rating verification equipment have the hysteresis management tool which is use rating 
verification equipment of claim 1 thru/or claim 4, and manages the hysteresis at the time of use rating 
verification, and combine with certification information or certification auxiliary information, and a certification 
information maintenance means or the 1 st certification auxiliary information-management means manage 
transfer information, and carry out that trial information stores said transfer information to a hysteresis 
management tool at the time of use rating verification including transfer information further as the description. 
[Claim 6] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section, 
Said certification auxiliary information issue section, 

A certification information management means to manage the certification information used in the case of 
authentication of use rating, 

The confidential information management tool which manages secret information, 

For asking for an inverse function, on the other hand, the 1st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means to the confidential 
information which said confidential information management tool manages at least, 
The confidential information which said confidential information management tool manages, and said 1 st 
certification auxiliary information count means to calculate certification auxiliary information based on the 
count result of a tropism function count means on the other hand, 

It has the 1 st means of communications which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification section, 

A certification information maintenance means to hold certification information, 
The 1st trial information count means which calculates the 1st trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
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which applies a tropism function on the other hand is a tropism function count means, 

It is said 2nd response indication count means [ 1st ] which a tropism function count means is made to act on 
the other hand, and calculates the 1 st response indication to the 2nd trial information which received, 
The 1st response indication verification means which inspects whether the 2nd [ said ] result on which the 
tropism count means was made to act on the other hand, and the 2nd response indication are equal to the value 
acquired based on a part or all of the certification information which said certification information maintenance 
means holds, and the 1st trial information, 

It has the 2nd means of communications which transmits and receives information in process of authentication 

of use rating, 

Said certification section, 

A confidential information maintenance means to hold secret information, 

A certification auxiliary information management means to manage the certification auxiliary information that 
it uses for count of a response indication, 

The internal-state management tool which manages the internal state corresponding to certification auxiliary 
information, 

The 2nd trial information count means which calculates trial information, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 

It is said 3rd response indication count means [ 2nd ] which calculates the 2nd response indication by on the 
other hand making a tropism function count means act to the value acquired based on a part or all of the 
received information, the confidential information which said confidential information maintenance means 
holds, and the certification auxiliary information which said certification auxiliary information management 
means manages, 

The 2nd trial information count means which calculates the 2nd trial information, 

Whether the 3rd [ said ] result on which the tropism function count means was made to act on the other hand, 
and a response indication are equal to the value acquired based on a part or all of the 1 st response indication and 
the 2nd trial information, the confidential information which said confidential information maintenance means 
holds, and the certification auxiliary information which said certification auxiliary information management 
means manages, and the 2nd response indication verification means to inspect, 

Use rating verification equipment characterized by having the 3rd means of communications which transmits 
and receives information in process of the process of authentication of use rating, and certification auxiliary 
information count. 

[Claim 7] In the use rating verification equipment which verifies use rating including the certification auxiliary 
information issue section, the verification section, and the certification section, 
Said certification auxiliary information issue section, 

A certification information management means to manage the certification information used in the case of 
authentication of use rating, 

The confidential information management tool which manages secret information, 

For asking for an inverse function, on the other hand, the 1st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means to the confidential 
information which said confidential information management tool manages at least, 
The confidential information which said confidential information management tool manages, and said 1st 
certification auxiliary information count means to calculate certification auxiliary information based on the 
count result of a tropism function count means on the other hand, 

It has the 1st means of communications which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification section, 

The 1st confidential information maintenance means holding secret information, 

The 1st certification auxiliary information management means which manages certification auxiliary 

information, 

The 1st trial information count means which calculates the 1st trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 
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It is said 2nd response indication count means [ 1st ] which a tropism function count means is made to act on 
the other hand, and calculates the 1 st response indication to the 2nd trial information which received, 
The 1 st response indication verification means which inspects whether the 2nd [ said ] result on which the 
tropism count means was made to act on the other hand, and the 2nd response indication are equal to the value 
acquired based on a part or all of the certification information which said certification information maintenance 
means holds, and the 1st trial information, 

It has the 2nd means of communications which transmits and receives information in process of authentication 

of use rating, 

Said certification section, 

The 2nd confidential information maintenance means holding secret information, 

The 2nd certification auxiliary information management means which manages the certification auxiliary 
information that it uses for creation of a response indication, 

The internal-state management tool which manages the internal state corresponding to certification auxiliary 
information, 

The 2nd trial information count means which calculates trial information, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count means, 

It is said 3rd response indication count means [ 2nd ] which calculates the 2nd response indication by on the 
other hand making a tropism function count means act to the value acquired based on a part or all of the 
received information, the confidential information which said confidential information maintenance means 
holds, and the certification auxiliary information which said certification auxiliary information management 
means manages, 

The 2nd trial information count means which calculates the 2nd trial information, 

Whether the 3rd [ said ] result on which the tropism function count means was made to act on the other hand, 
and a response indication are equal to the value acquired based on a part or all of the 1 st response indication and 
the 2nd trial information, the confidential information which said confidential information maintenance means 
holds, and the certification auxiliary information which said certification auxiliary information management 
means manages, and the 2nd response indication verification means to inspect, 

Use rating verification equipment by which it is characterized [ which has the 3rd means of communications 
which transmits and receives information in process of the process of authentication of use rating, and 
certification auxiliary information count ]. 

[Claim 8] It is use rating verification equipment carry out containing use limit description in count of the 
response indication generated in the certification auxiliary information are use rating verification equipment of 
claim 6 thru/or claim 7, combine with certification information and a certification information-management 
means manages the use limit description which is the information which shows use conditions, and combine 
with certification auxiliary information, manage a certification auxiliary information-management means and 
use limit description, and use at the certification section, and the certification section as the description. 
[Claim 9] Use rating verification equipment characterized by decoding information, using the value acquired 
from certification information or certification information as a decode key of said decode means when it judges 
with it being use rating verification equipment of claim 6 thru/or claim 8, and having a decode means, and there 
being use rating. 

[Claim 10] It is use rating verification equipment have the hysteresis management tool which is use rating 
verification equipment of claim 6 thru/or claim 9, and manages the hysteresis at the time of use rating 
verification, and combine with certification information or certification auxiliary information, and a certification 
information maintenance means or the 1st certification auxiliary information-management means manage 
transfer information, and carry out that trial information stores said transfer information to a hysteresis 
management tool at the time of use rating verification including transfer information further as the description. 
[Claim 1 1] In the use rating verification approach of verifying use rating including a certification auxiliary 
information issue step, a verification step, and a certification step, 
Said certification auxiliary information issue step, 

The certification information maintenance substep holding the certification information used in the case of 
authentication of use rating, 

The confidential information maintenance substep holding secret information, 
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For asking for an inverse function, on the other hand, the 1st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep to the confidential 
information held by said confidential information maintenance substep at least, 
The confidential information held by said confidential information maintenance substep, and said 1 st 
certification auxiliary information count substep which calculates certification auxiliary information based on 
the count result of a tropism function count substep on the other hand, 

It has the 1 st communication link substep which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification step, 

The certification information maintenance substep holding certification information, 
The trial information count substep which calculates trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep, 
The certification information held by said certification information maintenance substep, and the response 
indication verification substep which inspects whether the 2nd [ said ] result on which the tropism count substep 
was made to act on the other hand, and a response indication are equal to the value acquired based on a part or 
all of trial information, 

It has the 2nd communication link substep which transmits and receives information in process of 
authentication of use rating, 
Said certification step, 

The confidential information maintenance substep holding secret information, 

The certification auxiliary information maintenance substep holding the certification auxiliary information that 
it uses for count of a response indication, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 

which applies a tropism function on the other hand is a tropism function count substep, 

It is said 3rd response indication count substep which calculates a response indication by on the other hand 

making a tropism function count substep act to the value acquired based on a part or all of trial information, the 

confidential information held by said confidential information maintenance substep, and the certification 

auxiliary information held by said certification auxiliary information maintenance substep, 

The use rating verification approach characterized by having the 3rd communication link substep which 

transmits and receives information in process of the process of authentication of use rating, and certification 

auxiliary information count. 

[Claim 12] In the use rating verification approach of verifying use rating including a certification auxiliary 
information issue step, a verification step, and a certification step, 
Said certification auxiliary information issue step, 

The certification information maintenance substep holding the certification information used in the case of 
authentication of use rating, 

The confidential information maintenance substep holding secret information, 

For asking for an inverse function, on the other hand, the 1 st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep to the confidential 
information held by said confidential information maintenance substep at least, 

The confidential information held by said confidential information maintenance substep, and said 1st 
certification auxiliary information count substep which calculates certification auxiliary information based on 
the count result of a tropism function count substep on the other hand, 

It has the 1 st communication link substep which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification step, 

The certification information maintenance substep holding certification information, 
The 1st trial information count substep which calculates the 1st trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep, 

It is said 2nd response indication count substep [ 1 st ] which a tropism function count substep is made to act on 
the other hand, and calculates the 1 st response indication to the 2nd trial information which received, 
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The 1 st response indication verification substep which inspects whether the 2nd [ said ] result on which the 
tropism count substep was made to act on the other hand, and the 2nd response indication are equal to the value 
acquired based on a part or all of the certification information held by said certification information 
maintenance substep, and the 1 st trial information, 

It has the 2nd communication link substep which transmits and receives information in process of 

authentication of use rating, and is said certification step, 

The confidential information maintenance substep holding secret information, 

The certification auxiliary information maintenance substep holding the certification auxiliary information that 
it uses for count of a response indication, 

The internal-state maintenance substep holding the internal state corresponding to certification auxiliary 
information, 

The 2nd trial information count substep which calculates trial information, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep, 

It is said 3rd response indication count substep [ 2nd ] which calculates the 2nd response indication by on the 
other hand making a tropism function count substep act to the value acquired based on informational a part or 
informational all that was received, the confidential information held by said confidential information 
maintenance substep, and the certification auxiliary information held by said certification auxiliary information 
maintenance substep, 

The 2nd trial information count substep which calculates the 2nd trial information, 

Whether the 3rd [ said ] result on which the tropism function count substep was made to act on the other hand, 
and a response indication are equal to the value acquired based on a part or all of the 1st response indication and 
the 2nd trial information, the confidential information held by said confidential information maintenance 
substep, and the certification auxiliary information held by said certification auxiliary information maintenance 
substep, and the 2nd response indication verification substep to inspect, 

The use rating verification approach characterized by having the 3rd communication link substep which 
transmits and receives information in process of the process of authentication of use rating, and certification 
auxiliary information count. 

[Claim 13] In the use rating verification approach of verifying use rating including a certification auxiliary 
information issue step, a verification step, and a certification step, 
Said certification auxiliary information issue step, 

The certification information maintenance substep holding the certification information used in the case of 
authentication of use rating, 

The confidential information maintenance substep holding secret information, 

For asking for an inverse function, on the other hand, the 1st [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep to the confidential 
information held by said confidential information maintenance substep at least, 
The confidential information held by said confidential information maintenance substep, and said 1 st 
certification auxiliary information count substep which calculates certification auxiliary information based on 
the count result of a tropism function count substep on the other hand, 

It has the 1st communication link substep which transmits and receives information in process of count of 
certification auxiliary information, 
Said verification step, 

The 1 st confidential information maintenance substep holding secret information, 

The 1st certification auxiliary information maintenance substep holding certification auxiliary information, 
The 1st trial information count substep which calculates the 1st trial information, 

For asking for an inverse function, on the other hand, the 2nd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep, 

It is said 2nd response indication count substep [ 1 st ] which a tropism function count substep is made to act on 
the other hand, and calculates the 1st response indication to the 2nd trial information which received, 
The 1st response indication verification substep which inspects whether the 2nd [ said ] result on which the 
tropism count substep was made to act on the other hand, and the 2nd response indication are equal to the value 
acquired based on a part or all of the certification information held by said certification information 
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maintenance substep, and the 1st trial information, 

It has the 2nd communication link substep which transmits and receives information in process of 
authentication of use rating, 
Said certification step, 

The 2nd confidential information maintenance substep holding secret information, 

The 2nd certification auxiliary information maintenance substep holding the certification auxiliary information 
that it uses for creation of a response indication, 

The internal-state maintenance substep holding the internal state corresponding to certification auxiliary 
information, 

The 2nd trial information count substep which calculates trial information, 

For asking for an inverse function, on the other hand, the 3rd [ difficult in computational complexity at least ] 
which applies a tropism function on the other hand is a tropism function count substep, 

It is said 3rd response indication count substep [ 2nd ] which calculates the 2nd response indication by on the 
other hand making a tropism function count substep act to the value acquired based on informational a part or 
informational all that was received, the confidential information held by said confidential information 
maintenance substep, and the certification auxiliary information held by said certification auxiliary information 
maintenance substep, 

The 2nd trial information count substep which calculates the 2nd trial information, 

Whether the 3rd [ said ] result on which the tropism function count substep was made to act on the other hand, 
and a response indication are equal to the value acquired based on a part or all of the 1 st response indication and 
the 2nd trial information, the confidential information held by said confidential information maintenance 
substep, and the certification auxiliary information held by said certification auxiliary information maintenance 
substep, and the 2nd response indication verification substep to inspect, 

The use rating verification approach by which it is characterized [ which has the 3rd communication link 
substep which transmits and receives information in process of the process of authentication of use rating, and 
certification auxiliary information count ]. 



[Translation done.] 
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